User Manual

M4300 Intelligent Edge Series Fully Managed Stackable Switches
Configuration Examples User Manual708
The Port Control setting for all other ports where authentication is not needed should be
Authorized. When the Port Control setting is Authorized, the port is unconditionally put in
a force-Authorized state and does not require any authentication. When the Port Control
setting is Auto, the authenticator PAE sets the controlled port mode
3. In the Guest VLAN field for ports 1/0/5– 1/0/8, enter 150 to assign these ports to the guest
VLAN.
You can configure additional settings to control access to the network through the ports.
See
Configure a Port Security Interface on page 556 for information about the settings.
4. Click the Apply button.
5. From the 802.1X Configuration page, set the Port Based
Authentication State and Guest
VLAN mode to Enable, and then the Apply button (See
Configure the Global Port
Security Mode on page 555).
This example uses the default values for the port authentication settings, but there are
several additional settings that you can configure. For example, the EAPOL Flood Mode
field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on
the device.
6. From the RADIUS Server Configuration page, configure a RADIUS server with the following
settings:
• Server Address:
192.168.10.23
• Secret Configured:
Yes
• Secret: secret123
• Active: Primary
For more information, see
Manage the RADIUS Server Settings on page 505.
7. Click the Add button.
8. From the
Authentication List page, configure the default List to use RADIUS as the first
authentication method (See
Configure a Login Authentication List on page 514).
This example enables 802.1X-based port security on the switch and prompts the hosts
connected on ports g5-g8 for an 802.1X-based authentication.
The switch passes the
authentication information to the configured RADIUS server.
MSTP
Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge
loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning
Tree Protocol (MSTP) supports multiple instances of Spanning Tree to efficiently channel
VLAN traffic over different interfaces. Each instance of the Spanning Tree behaves in the
manner specified in IEEE 802.1w, Rapid Spanning Tree, with slight modifications in the
working but not the end effect (chief among the effects is the rapid transitioning of the port to
the Forwarding state).