Mac-Based Network Access Control; Configure Authenticator - D-Link DES-3250TG User Manual

D-Link DES-3250TG Standalone Layer 2 Switch

MAC-Based Network Access Control

RADIUS
Server
Ethernet Switch
...
802.1X 802.1X 802.1X
802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X
Client Client Client
Client Client Client Client Client Client Client Client Client
Network access controlled port
Network access uncontrolled port
Figure 7- 64. Example of Typical MAC-Based Configuration
In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create "logical" Ports,
one for each attached device that required access to the LAN. The Switch would regard the single physical Port connecting it to
the shared media segment as consisting of a number of distinct logical Ports, each logical Port being independently controlled
from the point of view of EAPOL exchanges and authorization state. The Switch learns each attached devices' individual
MAC addresses, and effectively creates a logical Port that the attached device can then use to communicate with the LAN via
the Switch.

Configure Authenticator

Existing 802.1x port settings are displayed and can be configured using the window below.
Click Configure Authenticator on the PAE Access Entity folder on the Configuration menu to open the 802.1X
Authenticator Settings window:
103