802.1X Configuration - D-Link DES-3326SR Manual

802.1X Configuration

The DES-3326SR implements the server-side of the IEEE 802.1x Port-based Network Access Control. This
mechanism is intended to allow only authorized users, or other network devices, access to network resources by
establishing criteria for each port on the switch that a user or network device must meet before allowing that port
to forward or receive frames.
IEEE 802.1X operation must be enabled on the switch before it will function. It will necessary to determine the
whether to port-based or MAC-based 802.1x authorization (see below).
802.1X State
To use 802.1x on the switch, choose the type of authorization to use and click the Apply button.
Port-based Authorization means that ports configured for 802.1x function (see 802.1X Port Settings) are
initialized based on the port number only and subject to any authorization parameters as configured.
MAC-based Authorization means that ports configured for 802.1x function (see 802.1X Port Settings) are
initialized based on port number and MAC address, then subject to any authorization parameters configured.
Additional configuration is required to list the MAC address in the authorization list and to specify the port from
which request is made (see Initialize Ports below).
D-Link DES-3326SR Layer 3 Switch
Table 2. Conformance to IEEE 802.1X Standards
State Machine Name
Port Timers state machine
Authenticator PAE state machine
The Authenticator Key Transmit state machine
Reauthentication Timer state machine
Backend Authentication state machine
Controlled Directions state machine
The Key Receive state machine
Figure 14- 17. 802.1X State
92