D-Link xStack Reference Manual page 204

®
xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide
The following fields and settings can be viewed:
Parameter
Authorization
Attributes State
Authentication
Server Failover
From Port / To Port
Authentication
Methods
Figure 6 - 73. Compound Authentication Settings window
Description
Click the radio buttons to enable of disable the Authorization Attributes State.
Click the radio buttons to configure the authentication server failover function.
Block (default setting) - The client is always regarded as un-authenticated.
Local - The switch will resort to using the local database to authenticate the client. If the
client fails on local authentication, the client is regarded as un-authenticated, otherwise, it
authenticated.
Permit - The client is always regarded as authenticated. If guest VLAN is enabled, clients
will stay on the guest VLAN, otherwise, they will stay on the original VLAN.
Use the drop-down menus to select a range of ports.
The compound authentication method options include: None, Any (MAC, 802.1X or
WAC/JWAC), 802.1X+IMPB, IMPB+JWAC, and IMPB+WAC.

None means all compound authentication methods are disabled.

Any (MAC, 802.1X, JWAC or WAC) means if any of the authentication methods
pass, then access will be granted. In this mode, MAC, 802.1X and WAC/JWAC)
can be enabled on a port at the same time. In Any (MAC, 802.1X or WAC/JWAC
mode, whether an individual security module is active on a port depends on its
system state. As system states of WAC and JWAC are mutually exclusive, only one of
them will active on a port at the same time.

802.1X+IMPB means 802.1X will be verified first, and then IMPB will be verified.
Both authentication methods need to be passed.

IMPB+JWAC means JWAC will be verified first, and then IMPB will be verified.
190