Chapter 6 Tutorials
XGS4700-48F User’s Guide
93
2 Select Active and enter the guest VLAN ID (200 in this example) on ports 1, 2
and 3. The Switch puts unauthenticated clients in the specified guest VLAN.
Set Host-mode to Multi-Secure to have the Switch authenticate each client that
connects to one of these ports, and specify the maximum number of clients that
the Switch will authenticate on each of these port (5 in this example).
Click Apply.
3 Click the Save link in the upper right corner of the web configurator to save your
configuration permanently.
Clients that attach to port 1, 2 or 3 and fail to authenticate with the RADIUS
server now should be in VLAN 200 and can access the Internet, but cannot
communicate with devices in VLAN 1.
6.6 How to Configure Routing Policy
The Switch checks the routing table and then forwards traffic through the default
gateway (R1) based on the destination address. This example shows you how to
configure policy route to send traffic that matches a layer-3 classifier to a different
gateway (R2) for special treatment. The layer-3 classifier groups packets marked
with DSCP value 58 into a flow. Packets marked with different DSCP values, such
as 13 are forwarded to the default gateway. The Switch applies policy-based
routing rules to incoming packets prior to the normal routing.
