Compound Authentication Global Settings - D-Link DGS-3427 - xStack Switch - Stackable Product Manual

x Stack
802.1X + IMPB Mode
This mode adds an extra layer of security by checking the IP
MAC-Binding Port Binding (IMPB) table before trying one
of the supported authentication methods. The IMPB Table is
used to create a "white list" that checks if the IP streams
being sent by authorized hosts have been granted or not. In
the above diagram the Switch port has been configured to
allow clients to authenticate using 802.1X. If the client is in
the IMPB table and tries to connect to the network using this
authentication method and the client is listed in the white list
for legal IP/MAC/port checking, access will be granted. If a
client fails one of the authentication methods, access will be
denied.
IMPB + JWAC Mode
This mode adds an extra layer of security by checking the IP
MAC-Binding Port Binding (IMPB) table before trying one
of the supported authentication methods. The IMPB Table is
used to create a 'white-list' that checks if the IP streams being
sent by authorized hosts have been granted or not. In the
above diagram, the Switch port has been configured to allow
clients to authenticate using either JWAC. If the client is in
the IMPB table and tries to connect to the network using
either of these supported authentication methods and the
client is listed in the white list for legal IP/MAC/port
checking, access will be granted. If a client fails one of the
authentication methods, access will be denied.

Compound Authentication Global Settings

To view this window, click Security > Compound Authentication > Compound Authentication Global Settings, as shown
below.
Figure 6 - 77 Compound Authentication Global Settings window
Use the pull-down menu to select the authentication server failover state.
Parameter
Block
Local
®
DGS-3400 Series Layer 2 Gigabit Ethernet M anaged Sw itch
Description
If Block is selected, the client is always regarded as an un-authenticated.
If Local is selected, the Switch will resort to using the local database to authenticate the client.
If the client fails on local authentication, the client is regarded as un-authenticated. Otherwise,
the client is regarded as an authenticated.
Figure 6 - 75 802.1X + IMPB Mode example
Figure 6 - 76 IMPB + JWAC Mode example
340