D-Link xStack User Manual page 277

xStack
The following parameters may be viewed or set:
Parameter
State
Method
Password
Guest VLAN
Guest VLAN ID
Guest VLAN Member Ports
Max User(1-4000)
Authentication FailOver
Radius Authorization
Local Authorization
From Port/To Port
State
Mode
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
Description
MAC-based Access Control Global Settings
Use the pull-down menu to globally enable or disable the MAC-based Access Control
function on the Switch.
Use the pull-down menu to choose the type of authentication to be used when
authentication MAC addresses on a given port. The user may choose between the
following methods:
Local – Use this method to utilize the locally set MAC address database as the
authenticator for MAC-based Access Control. This MAC address list can be
configured in the MAC-based Access Control Local Database Settings window.
RADIUS – Use this method to utilize a remote RADIUS server as the authenticator for
MAC-based Access Control. Remember, the MAC list must be previously set on the
RADIUS server and the settings for the server must be first configured on the Switch.
Enter the password for the RADIUS server, which is to be used for packets being sent
requesting authentication. The default password is "default".
Displays the name of the previously configured Guest VLAN being used for this
function. Clicking the hyperlinked name will send the web manager to Guest VLAN
configuration screen for MAC-based Authentication.
Displays the VLAN ID of the previously configured Guest VLAN being used for this
function. Clicking the hyperlinked Guest VLAN ID will send the Web manager to
Guest VLAN configuration window for MAC-based Authentication.
Displays the list of ports that have been configured for the Guest VLAN.
Specifies to set the maximum number of authorized clients on the device. The default
value is 128. "No limit" means 4000, the maximum number of authenticated users on
the device.
When Authentication FailOver is Disabled, if the RADIUS servers are unreachable,
the authentication will fail. When the authentication FailOver is Enabled, if the
RADIUS servers are unreachable, the local database will be used to do the
authentication. Authentication FailOver is Disabled by default.
MAC-based Access Control Authorization Network Settings
If Enabled, the authorized data assigned by the RADIUS server will be accepted when
the global authorization network is enabled. The default state is Enabled.
If Enabled, the authorized data assigned by the Local database will be accepted if the
global authorization network is enabled. The default state is Enabled.
MAC-based Access Control Port Settings
Enter the Port range.
Use the pull-down menu to enable or disable the MAC-based Access Control function
on individual ports.
Port Based: In this mode, if one of the attached hosts is successfully authorized, all
hosts on the same port will be granted access to the network. If the port authorization
fails, this port will continue authenticating.
Host Based: In this mode, every user can individually authenticate and access the
network.
266