Guest Vlan - ZyXEL Communications GS3700 Series User Manual

Table 65 Advanced Application > Port Authentication > 802.1x (continued)
LABEL
Quiet-period
Tx-period
Supp-Timeout
Apply
Cancel

16.2.2 Guest VLAN

When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the
correct credentials are blocked from using the port(s). You can configure your Switch to have one
VLAN that acts as a guest VLAN. If you enable the guest VLAN (102 in the example) on a port (2 in
the example), the user (A in the example) that is not IEEE 802.1x capable or fails to enter the
correct username and password can still access the port, but traffic from the user is forwarded to
the guest VLAN. That is, unauthenticated users can have access to limited network resources in the
same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the
network administrator configures switches or routers with the guest network feature.
Figure 94 Guest VLAN Example
A
Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication >
802.1x screen click Guest Vlan to display the configuration screen as shown.
Chapter 16 Port Authentication
DESCRIPTION
Specify the number of seconds the port remains in the HELD state and rejects further
authentication requests from the connected client after a failed authentication exchange.
Specify the number of seconds the Switch waits for client's response before re-sending
an identity request to the client.
Specify the number of seconds the Switch waits for client's response to a challenge
request before sending another request.
Click Apply to save your changes to the Switch's run-time memory. The Switch loses
these changes if it is turned off or loses power, so use the Save link on the top navigation
panel to save your changes to the non-volatile memory when you are done configuring.
Click Cancel to begin configuring this screen afresh.
VLAN 100
VLAN 102
2
GS3700/XGS3700 Series User's Guide
Internet
149