Mac-Based Access Control (Mac); Mac-Based Access Control Settings - D-Link DES-3528 - xStack Switch - Stackable Reference Manual

xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide
Parameter
Port
Ports (e.g.: 1:1, 1:7)
Click the Find button to locate a specific entry based on the port number selected.
Click the Clear button to clear all the information entered in the fields.
Click the View All button to display all the existing entries.

MAC-based Access Control (MAC)

MAC-based access control is a method to authenticate and authorize access using either a port or host. For port-
based MAC, the method decides port access rights, while for host-based MAC, the method determines the MAC
access rights.
A MAC user must be authenticated before being granted access to a network. Both local authentication and remote
RADIUS server authentication methods are supported. In MAC-based access control, MAC user information in a local
database or a RADIUS server database is searched for authentication. Following the authentication result, users
achieve different levels of authorization.
Notes about MAC-based Access Control
There are certain limitations and regulations regarding MAC-based access control:
1. Once this feature is enabled for a port, the Switch will clear the FDB of that port.
2. If a port is granted clearance for a MAC address in a VLAN that is not a Guest VLAN, other MAC addresses on
that port must be authenticated for access and otherwise will be blocked by the Switch.
3. Ports that have been enabled for Link Aggregation and Port Security cannot be enabled for MAC-based
Authentication.
4. Ports that have been enabled for GVRP cannot be enabled for Guest VLAN.

MAC-based Access Control Settings

This window is used to set the parameters for the MAC-based access control function on the Switch. The user can set
the running state, method of authentication, RADIUS password, view the Guest VLAN configuration to be associated
with the MAC-based access control function of the Switch, and configure ports to be enabled or disabled for the MAC-
based access control feature of the Switch. Please remember, ports enabled for certain other features, listed
previously, and cannot be enabled for MAC-based access control.
To view this window, click Security > MAC-based Access Control (MAC) > MAC-based Access Control Settings,
as shown below:
Description
Use the drop-down menu to select the desired port.
Specify the ports for which to view or clear ND snooping entries. Tick the All Ports check
box to view or clear entries for all ports.
227