Dell PowerConnect 55xx Systems User Guide 135FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Maintenance Projects\DellContax\sources\CxU_Switching_NetworkSecurity.fmD E L L C O N F I D E N T I A L – P R E L I M I N A R Y 1 0 / 3 0 / 1 3 - F O R P R O O F O N LYusername and password must be entered in lower case and with nodelimiting characters (for example: aaccbb55ccff). To use MAC-basedauthentication at a port:– A Guest VLAN must be defined.– The port must be Guest-VLAN-enabled.– The packets from the first supplicant, at the port before it isauthorized, must be untagged.You can configure a port to use Dot1x only, MAC-based only, or Dot1x andMAC-based authentication. If a port is configured to use both Dot1x andMAC-based authentication, a Dot1x supplicant has precedence over anon-Dot1x device. The Dot1x supplicant preempts an authorized, butnon-Dot1x device, at a port that is configured with a single session.Unauthenticated VLAN and Guest VLANsUnauthenticated VLANs and Guest VLANs provide access to services that donot require the subscribing devices or ports to be Dot1x or MAC-Basedauthenticated and authorized.An unauthenticated VLAN is a VLAN that allows access by authorized andunauthorized devices or ports. You can configure one or more VLAN to beunauthenticated in the VLAN Membership pages in "VLANs" on page 467.An unauthenticated VLAN has the following characteristics:• It must be a static VLAN, and cannot be the Guest VLAN or the defaultVLAN.• The VLAN’s member ports must be manually configured as taggedmembers.• The member ports must be trunk and/or general ports. An access portcannot be member of an unauthenticated VLAN.The Guest VLAN, if configured, is a static VLAN with the followingcharacteristics.• It must be manually defined from an existing, static VLAN.• It is automatically available only to unauthorized devices, or to ports ofdevices that are connected and Guest VLAN enabled.
