Compound Authentication - D-Link Xstack DES-3528 Series Reference Manual

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide

Compound Authentication

Compound Authentication settings allows for multiple authentication to be supported on the Switch.
Compound Authentication
Modern networks employ many authentication methods. The Compound Authentication methods supported by this
Switch include 802.1X, MAC-based access control (MAC), Web-based Access Control (WAC), Japan Web-based
Access Control (JWAC), and IP-MAC-Port Binding (IMPB). The Compound Authentication feature allows clients
running different authentication methods to connect to the network using the same switch port.
The Compound Authentication feature can be implemented using one of the following modes:
Any (MAC, 802.1X or WAC) Mode
In the diagram above the Switch port has been
configured to allow clients to authenticate using
802.1X, MAC, or WAC. When a client tries to
connect to the network, the Switch will try to
authenticate the client using one of these methods
and if the client passes they will be granted access to
the network.
Any (MAC, 802.1X or JWAC) Mode
In the diagram above the Switch port has been
configured to allow clients to authenticate using
802.1X, MAC, or JWAC. When a client tries to
connect to the network, the Switch will try to
authenticate the client using one of these methods
and if the client passes they will be granted access to
the network.
802.1X + IMPB Mode
This mode adds an extra layer of security by
checking the IP MAC-Binding Port Binding (IMPB)
table before trying one of the supported
authentication methods. The IMPB Table is used to
create a 'white list' that checks if the IP streams
being sent by authorized hosts have been granted or
not. In the above diagram the Switch port has been
configured to allow clients to authenticate using
802.1X. If the client is in the IMPB table and tries to
connect to the network using this authentication
method and the client is listed in the white list for
legal IP/MAC/port checking, access will be granted. If
a client fails one of the authentication methods,
access will be denied.
IMPB + WAC/JWAC Mode
252