Compound Authentication - D-Link DES-3528 - xStack Switch - Stackable Reference Manual

xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide

Compound Authentication

Compound Authentication settings allows for multiple authentication to be supported on the Switch.
Compound Authentication
Modern networks employ many authentication methods. The Compound Authentication methods supported by this
Switch include 802.1X, MAC-based access control (MAC), Web-based Access Control (WAC), Japan Web-based
Access Control (JWAC), and IP-MAC-Port Binding (IMPB). The Compound Authentication feature allows clients
running different authentication methods to connect to the network using the same switch port.
The Compound Authentication feature can be implemented using one of the following modes:
Any (MAC, 802.1X or WAC) Mode
In the diagram above the Switch port has been
configured to allow clients to authenticate using 802.1X,
MAC, or WAC. When a client tries to connect to the
network, the Switch will try to authenticate the client
using one of these methods and if the client passes they
will be granted access to the network.
Any (MAC, 802.1X or JWAC) Mode
In the diagram above the Switch port has been
configured to allow clients to authenticate using 802.1X,
MAC, or JWAC. When a client tries to connect to the
network, the Switch will try to authenticate the client
using one of these methods and if the client passes they
will be granted access to the network.
802.1X + IMPB Mode
This mode adds an extra layer of security by checking
the IP MAC-Binding Port Binding (IMPB) table before
trying one of the supported authentication methods. The
IMPB Table is used to create a 'white list' that checks if
the IP streams being sent by authorized hosts have
been granted or not. In the above diagram the Switch
port has been configured to allow clients to authenticate
using 802.1X. If the client is in the IMPB table and tries
to connect to the network using this authentication
method and the client is listed in the white list for legal
IP/MAC/port checking, access will be granted. If a client
fails one of the authentication methods, access will be
denied.
243