How do I assign VLANs using RADIUS on my managed switch using CLI commands?

Create VLAN 2000.

(Netgear Switch) #network protocol none Changing protocol mode will reset ip configuration. Are you sure you want to continue? (y/n) y (Netgear Switch) #network parms 192.168.0.5 255.255.255.0 (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 2000 (Netgear Switch) #exit
Enable dot1x authentication on the switch

(Netgear Switch) (Config)#dot1x system-auth-control
Use the RADIUS as the authenticator.

(Netgear Switch) (Config)#aaa authentication dot1x default radius
Enable the switch to accept VLAN assignment by the RADIUS server.

(Netgear Switch) (Config)#authorization network radius
Set the RADIUS server IP address.

(Netgear Switch) (Config)#radius server host auth 192.168.0.1
Set the NAS-IP address for the RADIUS server..

(Netgear Switch) (Config)#radius server key auth 192.168.0.1 Enter secret (16 characters max):12345 Re-enter secret:12345 Set the radius server key. (Netgear Switch) (Config)#radius server attribute 4 192.168.0.1
Force 1/0/6 to be authorized for it to connect to the RADIUS server.

(Netgear Switch) (Config)#interface 1/0/6 (Netgear Switch) (Interface 1/0/6)#dot1x port-control force-authorized (Netgear Switch) (Interface 1/0/6)#exit
Show the dot1x detail for 1/0/5.

For more information, see the following support articles:

This article applies to the following managed switches and their respective firmware:

Last Updated:07/07/2025 | Article ID: 21806