Configure The Global 802.1X Authentication Settings - NETGEAR S3600 Series User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
supplicant is allowed to attempt authentication on a port in this mode. Ports in this mode
are under bidirectional control. 802.1X is the default authentication mode. 802.1X is
also referred to as Dot1x.
NOTE: For port authentication, if we refer to a port, it means the same as a
physical interface.
An 802.1X network includes three components:
• Authenticator: The switch port that is authenticated before access to system services
is permitted.
• Supplicant: The client device or host that is connected to the authenticated port
requesting access to the system services.
• Authentication server: The external server, for example, the RADIUS server that
performs the authentication on behalf of the authenticator, and indicates if the
supplicant is authorized to access system services.
NOTE: For more information about 802.1X and a configuration example, see
802.1X port access control on page 583.
Configure the global 802.1X authentication
settings
You can enable 802.1X on the switch and configure the global 802.1X settings that
apply to the switch.
If you enable 802.1X, authentication must be performed by a RADIUS server:
• RADIUS server: Configure a RADIUS server (see RADIUS servers on page 382).
• Primary authentication method: Set the primary authentication method to RADIUS,
that is, RADIUS must be the first method for a login authentication list (see
Authentication lists on page 396).
To configure the global 802.1X authentication settings:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network,
or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of
your web browser.
If you do not know the IP address of the switch, see Access the switch on-network
and connected to the Internet on page 25 or Access the switch off-network and not
connected to the Internet on page 32.
The Device Admin Password page displays.
Manage Switch Security 408 User Manual