Mac-Based Access Control; Mac-Based Access Control Settings - D-Link DGS-3200-16 - Switch - Stackable User Manual

xStack

MAC-based Access Control

MAC-based Access Control is a method to authenticate and authorize access using either a port or host. For port-based MAC, the
method decides port access rights, while for host-based MAC, the method determines the MAC access rights.
A MAC user must be authenticated before being granted access to a network. Both local authentication and remote RADIUS
server authentication methods are supported. In MAC-based Access Control, MAC user information in a local database or a
RADIUS server database is searched for authentication. Following the authentication result, users achieve different levels of
authorization.
Notes about MAC-based Access Control
There are certain limitations and regulations regarding MAC-based Access Control:
1. Once this feature is enabled for a port, the Switch will clear the FDB of that port.
2. If a port is granted clearance for a MAC address in a VLAN that is not a Guest VLAN, other MAC addresses on that port
must be authenticated for access and otherwise will be blocked by the Switch.
3. A port accepts a maximum of sixteen authenticated MAC addresses per physical port of a VLAN that is not a Guest VLAN.
Other MAC addresses attempting authentication on a port with the maximum number of authenticated MAC addresses will be
blocked.
4. Ports that have been enabled for Link Aggregation, Port Security, or GVRP authentication cannot be enabled for MAC-based
Authentication.

MAC-based Access Control Settings

This window is used to set the parameters for the MAC-based Access Control function on the Switch. The user can set the running
state, method of authentication, RADIUS password, view the Guest VLAN configuration to be associated with the MAC-based
Access Control function of the Switch, and configure ports to be enabled or disabled for the MAC-based Access Control feature
of the Switch. Please remember, ports enabled for certain other features, listed previously, can not be enabled for MAC-based
Access Control.
To view the following window, click Security > MAC-based Access Control > MAC-based Access Control Global Settings:
To configure a port or range of ports for the MAC-based Access Control feature, use the From Port and To Port drop-down menus
to choose the ports, and then use the State drop-down menu to enable them. The following parameters may be viewed or set:
®
DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch
Figure 5 - 43. MAC-based Access Control Settings window
132