Igmp Access Control Settings (Igmp Authentication) - D-Link xStack DGS-3200-10 User Manual

xStack

IGMP Access Control Settings (IGMP Authentication)

Users can set IGMP a uthentication, otherwise known a s IGMP acces s control, on i ndividual port s on the Switch. When t he
Authentication State is Enabled, a nd t he Switch receives an IGMP join re quest, t he Switch will se nd t he acce ss request to th e
RADIUS server to do the authentication.
IGMP authentication processes IGMP reports as follows: When a host sends a join message for the interested multicast group, the
Switch has to do authentication before learning the multicast group/port. The Switch sends an Access-Request to an authentication
server and the information including host MAC, switch port number, switch IP, and multicast group IP. When the Access-Accept
is answered from the authentication server, the Switch learns the multicast group/port. When the Access-Reject is answered from
the authentication server, the Switch won't learn the multicast group/port and won't process the packet further. The entry (host
MAC, switch port nu mber, an d multicast g roup IP) is pu t in th e "authentication failed list." Wh en there is n o an swer fro m th e
authentication server after T1 time, the Switch resends the Access-Request to the server. If the Switch doesn't receive a response
after N1 times, the result is denied and the entry (host MAC, switch port number, multicast group IP) is put in the "authentication
failed list." In general case, when the multicast group/port is already learned by the switch, it won't do the authentication again. It
only processes the packet as standard.
IGMP authentication processes IGMP leaves as follows: When the host sends leave message for the specific multicast group, the
Switch fo llows th e stand ard procedure for leaving a gr oup and t hen send s an A ccounting-Request t o th e accoun ting serv er fo r
notification. If there is no a nswer from the accounting server a fter T 2 t ime, the Switc h resends the Accounting-Request to t he
server. The maximum number of retry times is N2.
To view the following window, click Security > IGMP Access Control Settings:
To set up IGMP access control on individual ports for the Switch, complete the following fields:
Parameter
From Port
To Port
Authentication State
Click Apply to implement the changes made.
®
DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch
Figure 5 - 63. IGMP Access Control Settings window
Description
Use this drop-down menu to select the beginning port of a range of ports to be
enabled/disabled as IGMP access control ports.
Use this drop-down menu to select the ending port of a range of ports to be enabled/disabled
as IGMP access control ports.
Toggle to enable and disable the RADIUS authentication function on the specified ports.
179