Guest Vlan Settings - D-Link xStack Reference Manual

®
xStack DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch Web UI Reference Guide

Guest VLAN Settings

On 802.1X security-enabled networks, there is a need
for non- 802.1X supported devices to gain limited
access to the network, due to lack of the proper 802.1X
software or incompatible devices, such as computers
running Windows 98 or older operating systems, or the
need for guests to gain access to the network without
full authorization or local authentication on the Switch.
To supplement these circumstances, this switch now
implements 802.1X Guest VLANs. These VLANs
should have limited access rights and features separate
from other VLANs on the network.
To implement 802.1X Guest VLANs, the user must first
create a VLAN on the network with limited rights and
then enable it as an 802.1X guest VLAN. Then the
administrator must configure the guest accounts
accessing the Switch to be placed in a Guest VLAN
when trying to access the Switch. Upon initial entry to
the Switch, the client wishing services on the Switch will
need to be authenticated by a remote RADIUS Server
or local authentication on the Switch to be placed in a
fully operational VLAN.
If authenticated and the authenticator possess the VLAN placement information, that client will be accepted into the
fully operational target VLAN and normal switch functions will be open to the client. If the authenticator does not
have target VLAN placement information, the client will be returned to its originating VLAN. Yet, if the client is
denied authentication by the authenticator, it will be placed in the Guest VLAN where it has limited rights and
access. The adjacent figure should give the user a better understanding of the Guest VLAN process.
Limitations Using the Guest VLAN
• Ports supporting Guest VLANs cannot be GVRP enabled and vice versa.
• A port cannot be a member of a Guest VLAN and a static VLAN simultaneously.
• Once a client has been accepted into the target VLAN, it can no longer access the Guest VLAN.
Remember, to set an 802.1X guest VLAN, the user must first configure a normal VLAN, which can be enabled here
for guest VLAN status. Only one VLAN may be assigned as the 802.1X guest VLAN.
To view this window, click Security > 802.1X > Guest VLAN Settings as shown below:
The fields that can be configured are described below:
Figure 9-13 Guest VLAN Settings window
390
Figure 9-12 Guest VLAN Authentication Process