Web-Based Access Control (Wac); Conditions And Limitations - D-Link xStack DGS-3400 Series Reference Manual
Web ui reference guide for layer 2+ managed gigabit ethernet switch
Hide thumbs
Also See for xStack DGS-3400 Series:
- Reference manual (629 pages) ,
- Cli reference manual (540 pages) ,
- Cli manual (463 pages)
Table of Contents
Advertisement
x Stack
Web-based Access Control (WAC)
Web-Based Authentication Login is a feature
designed to authenticate a user when the user is
trying to access the Internet via the Switch.
The authentication process uses HTTP protocol.
The switch enters the authenticating stage when
users would like to browse web screen (Ex:
http://www.dlink.com) through the web browser
(Ex: IE). When the switch detects HTTP packets,
and this port or host (host-based mode) is un-
authenticated,
the
Switch
username/password screen to query users. The user
cannot access the Internet until passing the
authentication process.
The Switch can be the authentication server itself,
and perform the authentication based on a local
database. The Switch also can be a RADIUS client
and perform the authentication process via
RADIUS protocol with a remote RADIUS server.
The client user initiates the authentication process
of WAC via a Web access.
Conditions and Limitations
1.
The subnet of the authentication VLAN's IP interface must be the same as that of the client. If not configured properly,
the authentication will be permanently denied by the authenticator. It cannot be a Guest VLAN.
2.
If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP
relay function so that client may obtain an IP address.
3.
The authentication VLAN of this function must be configured to access a DNS server to improve CPU performance, and
allow the processing of DNS, UDP and HTTP packets.
4.
Certain functions exist on the Switch that will filter HTTP packets, such as the Access Profile function. The user needs to
be very careful when setting filter functions for the target VLAN, so that these HTTP packets are not denied by the
Switch.
5.
The Redirection Path must be set before the Web-based Access Control can be enabled. If not, the user will be prompted
with an error message and the Web-based Access Control will not be enabled.
®
DGS-3400 Series Layer 2 Gigabit Ethernet M anaged Sw itch
will
pop
out
322
Advertisement
Table of Contents
