Compound Authentication Guest Vlan Settings - D-Link DGS-3700-12 User Manual

Authorized Mode
Click Apply to implement changes.

Compound Authentication Guest VLAN Settings

Users can assign ports to or remove ports from a Guest VLAN.
To view this window, click Security > Compound Authentication > Compound Authentication Guest VLAN
Settings, as shown below:
Figure 8- 35 Compound Authentication Guest VLAN Settings window
The following parameters may be configured:
Parameter
VLAN Name
VID (1-4094)
Port List (e.g:1, 6-9)
Action
Click Apply to implement changes made. Once properly configured, the Guest VLAN and associated ports will be
listed in the lower part of the window.
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet User Manual
802.1X+IMPB, IMPB+WAC, and MAC+IMPB.
None means all compound authentication methods are disabled.
Any (MAC, 802.1X or WAC) means if any of the authentication methods pass, then access
will be granted. In this mode, MBAC, 802.1X, and WAC can be enabled on a port at the same
time. In Any (MAC, 802.1X, WAC) mode, whether an individual security module is active on a
port depends on its system state.
802.1X+IMPB means 802.1X will be verified first, and then IMPB will be verified. Both
authentication methods need to be passed.
IMPB+WAC mean that IMPB will be verified first, and then WAC will be verified. Both
authentication methods need to be passed.
MAC+IMPB mean that MAC will be verified first, and then IMPB will be verified. Both
authentication methods need to be passed.
Toggle between Host-based and Port-based. When Port-based is selected, if one of the
attached hosts passes the authentication, all hosts on the same port will be granted access to
the network. If the user fails the authorization, this port will keep trying the next authentication
method. When Host-based is selected, users are authenticated individually.
Description
Click the button and assign a VLAN as a Guest VLAN by VLAN Name. The VLAN must be an
existing static VLAN.
Click the button and assign a VLAN as a Guest VLAN by VID. The VLAN must be an existing
static VLAN before this VID can be configured.
The list of ports to be configured. Alternatively, tick the All check box to set every port at
once.
Use the drop-down menu to choose the desired operation: Create VLAN, Add Ports, or
Delete Ports.
225