Conditions And Limitations; Web-Based Access Control Settings - D-Link DGS-3700 Series User Manual

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual

Conditions and Limitations

1. The subnet of the authentication VLAN's IP interface must be the same as that of the client. If not configured
properly, the authentication will be permanently denied by the authenticator.
2. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or
a DHCP relay function so that client may obtain an IP address.
3. The authentication VLAN of this function must be configured to access a DNS server to improve CPU
performance, and allow the processing of DNS, UDP and HTTP packets.
4. Certain functions exist on the Switch that will filter HTTP packets, such as the Access Profile function. The
user needs to be very careful when setting filter functions for the target VLAN, so that these HTTP packets are
not denied by the Switch.
5. The Redirection Path must be set before the Web-based Access Control can be enabled. If not, the user will
be prompted with an error message and the Web-based Access Control will not be enabled.
6. If a RADIUS server is to be used for authentication, the user must first establish a RADIUS Server with the
appropriate parameters, including the target VLAN, before enabling the Web-based Access Control on the
Switch.

Web-based Access Control Settings

This window is used to configure the Switch for Web-based Access Control Settings on the Switch.
To view this window, click Security > Web Authenication > Web-based Access Control Settings as shown below:
To set the Web-based Access Control for the Switch, complete the following fields:
Parameter
State
Method
Figure 5 - 46 Web-based Access Control Settings
Description
Toggle the State field to either Enable or Disable for the Web-based Access Control settings
of the Switch.
Use the pull-down menu to choose the authenticator for Web-based Access Control. The user
may choose:
local – Choose this parameter to use the local authentication method of the Switch as the
authenticating method for users trying to access the network via the switch. This is, in fact, the
username and password to access the Switch configured using the User Account Creation
screen seen below.
radius – Choose this parameter to use a remote RADIUS server as the authenticating method
184