Local Enable Password Settings; Mac-Based Access Control (Mac) - D-Link xStack Reference Manual

®
xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide

Local Enable Password Settings

Users can configure the locally enabled password for Enable Admin. When a user chooses the "local_enable" method to promote
user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is locally
set on the Switch.
To view the following window, click Security > Access Authentication Control > Local Enable Password Settings:
The following parameters can be configured:
Parameter
Encryption
Old Local Enable
Password
New Local Enable
Password
Confirm Local Enable
Password
Local Enable
Password
Click Apply to implement changes made.

MAC-based Access Control (MAC)

MAC-based Access Control is a method to authenticate and authorize access using either a port or host. For port-based MAC, the
method decides port access rights, while for host-based MAC, the method determines the MAC access rights.
A MAC user must be authenticated before being granted access to a network. Both local authentication and remote RADIUS
server authentication methods are supported. In MAC-based Access Control, MAC user information in a local database or a
RADIUS server database is searched for authentication. Following the authentication result, users achieve different levels of
authorization.
Notes about MAC-based Access Control
There are certain limitations and regulations regarding MAC-based Access Control:
1. Once this feature is enabled for a port, the Switch will clear the FDB of that port.
2. If a port is granted clearance for a MAC address in a VLAN that is not a Guest VLAN, other MAC addresses on that port
must be authenticated for access and otherwise will be blocked by the Switch.
3. A port accepts a maximum of two hundred authenticated MAC addresses per physical port of a VLAN that is not a Guest
VLAN. Other MAC addresses attempting authentication on a port with the maximum number of authenticated MAC
addresses will be blocked.
Figure 6 - 52. Local Enable Password Settings window
Description
Use the drop-down menu to select the encryption type.
If a password was previously configured for this entry, enter it here in order to change it to a
new password
Enter the new password that you wish to set on the Switch to authenticate users attempting
to access Administrator Level privileges on the Switch. The user may set a password of up to
15 characters.
Confirm the new password entered above. Entering a different password here from the one
set in the New Local Enabled field will result in a fail message.
Specify the password in plain text or SHA-1 encrypted form.
170