Compound Authentication; Any (Mac, 802.1X, Wac Or Jwac) Mode; 802.1X + Impb Mode - D-Link xStack DGS-3400 Series Reference Manual

x Stack

Compound Authentication

Modern networks employ many authentication methods. The Compound Authentication methods supported by this Switch include
802.1X, MAC-based Access Control (MAC), Web-based Access Control (WAC), Japan Web-based Access Control (JWAC), and
IP-MAC-Port Binding (IMPB). The Compound Authentication feature allows clients running different authentication methods to
connect to the network using the same switch port.
The Compound Authentication feature can be implemented using one of the following modes:

Any (MAC, 802.1X, WAC or JWAC) Mode

In the diagram on the right, the Switch port has been
configured to allow clients to authenticate using 802.1X,
MAC, WAC, or JWAC. When a client tries to connect to the
network, the Switch will try to authenticate the client using
one of these methods and If the client passes, it will be
granted access to the network.

802.1X + IMPB Mode

This mode adds an extra layer of security by checking the IP
MAC-Binding Port Binding (IMPB) table before trying one
of the supported authentication methods. The IMPB Table is
used to create a "white list" that checks if the IP streams
being sent by authorized hosts have been granted or not. In
the above diagram the Switch port has been configured to
allow clients to authenticate using 802.1X. If the client is in
the IMPB table and tries to connect to the network using this
authentication method and the client is listed in the white list
for legal IP/MAC/port checking, access will be granted. If a
client fails one of the authentication methods, access will be
denied.
®
DGS-3400 Series Layer 2 Gigabit Ethernet M anaged Sw itch
Figure 6 - 71 Any Mode – WAC example
Figure 6 - 72 Any Mode – JWAC example
Figure 6 - 73 802.1X + IMPB Mode example
359