NETGEAR FSM7328SNA Administration Manual page 305

NETGEAR Managed Switches Software Administration Manual, Release 8.0
authenticated and associated with the guest VLAN. This ensures that traffic from the client is accepted and
switched through the guest vlan..
In this example, dot1x is enabled on all the ports so that all the hosts that are authorized are assigned VLAN
1. On the port 1/0/1 and 1/0/24 , guest vlan is enabled. If guests connect to the port, they will be assigned
VLAN 2000. So that guests cannot access the internal VLAN but can access each other in the guest VLAN
CLI: Creating a Guest VLAN
(Netgear Switch) #vlan database
(Netgear Switch) (Vlan)#vlan 2000
(Netgear Switch) (Vlan)#exit
(Netgear Switch) (Config)#interface 1/0/1
(Netgear Switch) (Interface 1/0/1)#vlan participation include 2000
(Netgear Switch) (Interface 1/0/1)#exit
(Netgear Switch) (Config)#interface 1/0/24
(Netgear Switch) (Interface 1/0/24)#vlan participation include 2000
(Netgear Switch) (Interface 1/0/24)#exit
Create a VLAN 2000 and have 1/0/1 and 1/0/24 being the member of VLAN 2000.
(Netgear Switch) (Config)#aaa authentication dot1x default radius
(Netgear Switch) (Config)#dot1x system-auth-control
(Netgear Switch) (Config)#radius server host auth 192.168.0.1
(Netgear Switch) (Config)#radius server key auth 192.168.0.1
Enter secret (16 characters max):12345
Re-enter secret:12345
(Netgear Switch) (Config)#interface 1/0/6
(Netgear Switch) (Interface 1/0/6)#dot1x port-control force-authorized
(Netgear Switch) (Interface 1/0/6)#exit
(Netgear Switch) (Config)#interface 1/0/12
(Netgear Switch) (Interface 1/0/12)#dot1x port-control force-authorized
(Netgear Switch) (Interface 1/0/12)#exit
Enable dot1x and radius on the switch.
(Netgear Switch) (Config)#interface 1/0/1
(Netgear Switch) (Interface 1/0/1)#dot1x guest-vlan 2000
(Netgear Switch) (Interface 1/0/1)#exit
(Netgear Switch) (Config)#interface 1/0/24
(Netgear Switch) (Interface 1/0/24)#dot1x guest-vlan 2000
(Netgear Switch) (Interface 1/0/24)#exit
Security Management
v1.0, October 2009
15-21