Ip-Mac Binding Blocked; Port Access Entity (802.1X) - D-Link DES-3350SR User Manual

D-Link DES-3350SR Standalone Layer 3 Switch

IP-MAC Binding Blocked

To view unauthorized devices that have been blocked by IP-MAC binding restrictions open the IP-MAC Binding Blocked
window show below. Click IP-MAC Binding Blocked in the IP-MAC Blocked folder on the Configuration menu to open the
IP-MAC Binding Blocked window.
Figure 7 - 52. IP-MAC Binding Blocked window
To find an unauthorized device that has been blocked by the IP-MAC binding restrictions, enter the VLAN name and MAC
Address in the appropriate fields and click Find. To delete an entry click the delete button next to the entry's MAC address. To
delete all the entries in the IP-MAC Binding Blocked Table click Delete All.

Port Access Entity (802.1X)

802.1x Port-Based and MAC-Based Access Control
The IEEE 802.1x standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless
devices on a specified Local Area Network by using a Client and Server based access control model. This is accomplished by using
a RADIUS server to authenticate users trying to access a network by relaying Extensible Authentication Protocol over LAN
(EAPOL) packets between the Client and the Server. The following figure represents a basic EAPOL packet:
Figure 7 - 53. The EAPOL Packet
Utilizing this method, unauthorized devices are restricted from connecting to a LAN through a port to which the user is connected.
EAPOL packets are the only traffic that can be transmitted through the specific port until authorization is granted. The 802.1x
Access Control method holds three roles, each of which are vital to creating and upkeeping a stable and working Access Control
security method.
Figure 7 - 54. The three roles of 802.1x
The following section will explain the three roles of Client, Authenticator and Authentication Server in greater detail.
68