x Stack
IMPB + JWAC Mode
This mode adds an extra layer of security by checking the IP
MAC-Binding Port Binding (IMPB) table before trying one
of the supported authentication methods. The IMPB Table is
used to create a 'white-list' that checks if the IP streams being
sent by authorized hosts have been granted or not. In the
above diagram, the Switch port has been configured to allow
clients to authenticate using either JWAC. If the client is in
the IMPB table and tries to connect to the network using
either of these supported authentication methods and the
client is listed in the white list for legal IP/MAC/port
checking, access will be granted. If a client fails one of the
authentication methods, access will be denied.
Compound Authentication Global Settings
To view this window, click Security > Compound Authentication > Compound Authentication Global Settings, as shown
below.
Figure 6 - 75 Compound Authentication Global Settings window
Use the pull-down menu to select the authentication server failover state.
Parameter
Authentication
Server Failover
State
Click Apply to implement the changes.
Compound Authentication Settings
This window is used to configure the authorization mode and authentication method of individual ports.
To view this window, click Security > Compound Authentication > Compound Authentication Settings, as shown below.
®
DGS-3400 Series Layer 2 Gigabit Ethernet M anaged Sw itch
Description
Block - The client is always regarded as an un-authenticated.
Local - The Switch will resort to using the local database to authenticate the client. If the client
fails on local authentication, the client is regarded as un-authenticated. Otherwise, the client is
regarded as an authenticated.
Permit - The client is always regarded as an authenticated. If the guest VLAN enabled, the
client will stay at the guest VLAN, otherwise, it will stay at the original VLAN.
Figure 6 - 74 IMPB + JWAC Mode example
360