Port authentication, Configure the global 802.1x settings – NETGEAR AV Line M4250 GSM4210PX 8-Port Gigabit PoE+ Compliant Managed AV Switch with SFP (220W) User Manual

Page 552

Port authentication

With port-based authentication, when 802.1X is enabled both globally and on the port,
successful authentication of any one supplicant attached to the port results in all users
being able to use the port without restrictions. At any time, only one supplicant is allowed
to attempt authentication on a port in this mode. Ports in this mode are under
bidirectional control. 802.1X is the default authentication mode. 802.1X is also referred
to as dot1x.

Note: For port authentication, if we refer to a port, it means the same as a physical
interface.

An 802.1X network includes three components:

•

Authenticator: The port that is authenticated before access to system services is
permitted.

•

Supplicant: The host that is connected to the authenticated port requesting access
to the system services.

•

Authentication server: The external server, for example, the RADIUS server that
performs the authentication on behalf of the authenticator, and indicates whether
the supplicant is authorized to access system services.

Configure the global 802.1X settings

You can enable 802.X on the switch and configure the global 802.1X settings that apply
to the switch and to specific users.

If you enable 802.1X, authentication must be performed by a RADIUS server:

•

RADIUS server: Configure a RADIUS server (see RADIUS servers on page 500).

•

Primary authentication method: Set the primary authentication method to RADIUS,
that is, RADIUS must be method 1 for the defaultList setting of the login authentication
list (see Configure a login authentication list on page 514).

To configure the global 802.1X settings:

1. Launch a web browser.

2. In the address field of your web browser, enter the IP address of the switch.