Igmp Access Control Settings - D-Link xStack Reference Manual

®
xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide
Figure 6 - 75. Compound Authentication MAC Format Settings window
The following fields may be modified to configure Guest VLANs:
Parameter Description
Case
Use the drop-down menu to select the format for the RADIUS authentication username.
Lowerercase - Use lowercase format, the RADIUS authentication username will be formatted
as: aa-bb-cc-dd-ee-ff.
Uppercase - Use uppercase format, the RADIUS authentication username will be formatted as:
AA-BB-CC-DD-EE-FF.
Delimiter
Use the drop-down menu to select the delimiter format.
Hyphen - Use "-" as delimiter, the format is: AA-BB-CC-DD-EE-FF.
Colon - Use ":" as delimiter, the format is: AA:BB:CC:DD:EE:FF.
Dot - Use "." as delimiter, the format is: AA.BB.CC.DD.EE.FF.
None – Do not use any delimiter, the format is: AABBCCDDEEFF.
Delimiter Number
Use the drop-down menu to select the delimiter number.
1 - Single delimiter, the format is: AABBCC.DDEEFF.
2 - Double delimiter, the format is: AABB.CCDD.EEFF.
5 - Multiple delimiter, the format is: AA.BB.CC.DD.EE.FF.
Click the Apply button to accept the changes made.

IGMP Access Control Settings

Users can set IGMP authentication, otherwise known as IGMP access control, on individual ports on the Switch. When the
Authentication State is Enabled, and the Switch receives an IGMP join request, the Switch will send the access request to the
RADIUS server to do the authentication.
IGMP authentication processes IGMP reports as follows: When a host sends a join message for the interested multicast group, the
Switch has to do authentication before learning the multicast group/port. The Switch sends an Access-Request to an authentication
server and the information including host MAC, switch port number, switch IP, and multicast group IP. When the Access-Accept
is answered from the authentication server, the Switch learns the multicast group/port. When the Access-Reject is answered from
the authentication server, the Switch won't learn the multicast group/port and won't process the packet further. The entry (host
MAC, switch port number, and multicast group IP) is put in the "authentication failed list." When there is no answer from the
authentication server after T1 time, the Switch resends the Access-Request to the server. If the Switch doesn't receive a response
after N1 times, the result is denied and the entry (host MAC, switch port number, multicast group IP) is put in the "authentication
failed list." In general case, when the multicast group/port is already learned by the switch, it won't do the authentication again. It
only processes the packet as standard.
IGMP authentication processes IGMP leaves as follows: When the host sends leave message for the specific multicast group, the
Switch follows the standard procedure for leaving a group and then sends an Accounting-Request to the accounting server for
notification. If there is no answer from the accounting server after T2 time, the Switch resends the Accounting-Request to the
server. The maximum number of retry times is N2.
To view the following window, click Security > IGMP Access Control Settings:
192