Mac-Based Access Control Settings - D-Link DGS-3000 Series Reference Manual

2 If a port is granted clearance for a MAC address in a VLAN that is not a Guest VLAN, other MAC addresses
on that port must be authenticated for access and otherwise will be blocked by the Switch.
3 Ports that have been enabled for Link Aggregation and Port Security cannot be enabled for MAC-based
Authentication.
4 Ports that have been enabled for GVRP cannot be enabled for Guest VLAN.

MAC-based Access Control Settings

This window is used to set the parameters for the MAC-based access control function on the Switch. The user can set
the running state, method of authentication, RADIUS password, view the Guest VLAN configuration to be associated
with the MAC-based access control function of the Switch, and configure ports to be enabled or disabled for the MAC-
based access control feature of the Switch. Please remember, ports enabled for certain other features, listed
previously, and cannot be enabled for MAC-based access control.
To view this window, click Security > MAC-based Access Control (MAC) > MAC-based Access Control Settings
as shown below:
The fields that can be configured are described below:
Parameter
MAC-based Access
Control State
Method
DGS-3000 Series Gigabit Ethernet Switch Web UI Reference Guide
Figure 8-35 MAC-based Access Control Settings window
Description
Toggle to globally enable or disable the MAC-based access control function on the
Switch.
Use this drop-down menu to choose the type of authentication to be used when
authentication MAC addresses on a given port. The user may choose between the
following methods:
Local – Use this method to utilize the locally set MAC address database as the
authenticator for MAC-based access control. This MAC address list can be configured
231