...
- The LANCOM router is already setup with the administration network (INTRANET) with the address range 192.168.1.0/24. The router’s IP address in this network is 192.168.1.254.
- The router additionally supports a guest network (GUEST) for the Guest VLAN. This has the address range 192.168.3.0/24 with the IP address 192.168.3.254.
- The LANCOM router acts as the RADIUS server.
- A GS-3xxx series switch with the IP address 192.168.1.250 is operating as a RADIUS authenticator. The switch therefore forwards the requests from the network participants to the RADIUS server.
- Network participants with 802.1X support (RADIUS authenticator) who login successfully to the RADIUS server gain access to the administration network.
- Network participants with 802.1X support (RADIUS authenticator) who cannot login to the RADIUS server should have access neither to the administration network nor to the guest network.
- Network participants without or with deactivated 802.1X support should automatically be moved by the switch into the guest VLAN and thereby receive gain access to the guest network.
...