I have a Juniper SRX550 router. Port 0/0/0 is Internet. 0/0/2 is 172.16.64.1/18, and 0/0/3 is 172.16.128.1/18. I also have the Juniper to do DHCP for the two networks.

Cable goes from 0/0/2 to port 1 on a Netgear ProSafe XS716T (172.16.64.2/18). Then 0/0/3 to port 1 another Netgear ProSafe XS728T (172.16.128.2/18). Then, I have a third Netgear switch (172.16.64.3/18) that trunks with the other .64 switch. All 3 switches are on VLAN 1.

What I'm trying to do is, when a user connects to the 172.16.64.3/18 switch, I want them to get a 172.16.64.0/18 or 172.16.128.0/18 DHCP address depending on their login credentials. Is this possible?

Welcome to Network Engineering! The short answer is yes, if you implement 802.1x, which the Netgear switches do support. In brief, you will need a RADIUS server that will assign a VLAN based on the users' credentials. It's not a simple feature, but we can talk more about it if you provide some details.

  • Thank you. I do have a RADIUS server (laptop) which have freeRADIUS.net installed. I haven't created any accounts yet. Do I need to implement 802.1x on all 3 Netgear switches or just the one switch 172.16.64.3/18? – Matt Damoz Oct 9 at 20:38
  • 802.1X is port-based authentication, so you'll need to configure it on all switches that you want to authenticate ports on. – Zac67 Oct 9 at 20:42
  • Just the switch(es) the users connect to. But a laptop is not a suitable server. You want it to be as reliable as your infrastructure. – Ron Trunk Oct 9 at 20:42
  • The users will be connecting to all 3 switches, but I only want the 172.16.64.3/18 to give either a 172.16.64.0/18 or 172.16.128.0/18 ip address. So I'm assuming I only need to do this only on this one switch. I'm just using the laptop to test RADIUS, if this works, I'll use something more reliable. – Matt Damoz Oct 9 at 20:45
  • Should I start by creating 2 VLANS on the 172.16.64.3/18 switch? VLAN IDs 64 and 128 under Switching--->VLAN? – Matt Damoz Oct 9 at 20:54

Your Answer

 
discard

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.