TL-SL3428_V3_User_Guide - TP-Link

authenticated. But they need to be authenticated before accessing external resources. Afterpassing the authentication, the ports will be removed from the Guest VLAN and be allowed toaccess the other resources.With the Guest VLAN function enabled, users can access the Guest VLAN to install 802.1X clientprogram or upgrade their 802.1x clients without being authenticated. If there is no supplicant pastthe authentication on the port in a certain time, the switch will add the port to the Guest VLAN.With 802.1X function enabled and Guest VLAN configured, after the maximum number retrieshave been made to send the EAP-Request/Identity packets and there are still ports that have notsent any response back, the switch will then add these ports into the Guest VLAN according totheir link types. Only when the corresponding user passes the 802.1X authentication, the port willbe removed from the Guest VLAN and added to the specified VLAN. In addition, the port will backto the Guest VLAN when its connected user logs off.The 802.1X function is implemented on the Global Config, Port Config and Radius Serverpages.11.4.1 Global ConfigOn this page, you can enable the 802.1X authentication function globally and control theauthentication process by specifying the Authentication Method, Guest VLAN and various Timers.Choose the menu Network Security→802.1X→Global Config to load the following page.Figure 11-20 Global ConfigThe following entries are displayed on this screen:‣ Global Config802.1X:Authentication Method:Enable/Disable the 802.1X function.Select the Authentication Method from the pull-down list. EAP-MD5: IEEE 802.1X authentication systemuses extensible authentication protocol (EAP) to161