D-Link xStack DGS-3420 Series Reference Manual page 333

xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch Web UI Reference Guide
multicast group/port. When the Access-Reject is answered from the authentication server, the Switch won't learn the
multicast group/port and won't process the packet further. The entry (host MAC, switch port number, and multicast
group IP) is put in the "authentication failed list." When there is no answer from the authentication server after T1 time,
the Switch resends the Access-Request to the server. If the Switch doesn't receive a response after N1 times, the
result is denied and the entry (host MAC, switch port number, multicast group IP) is put in the "authentication failed
list." In general case, when the multicast group/port is already learned by the switch, it won't do the authentication
again. It only processes the packet as standard.
IGMP authentication processes IGMP leaves as follows: When the host sends leave message for the specific multicast
group, the Switch follows the standard procedure for leaving a group and then sends an Accounting-Request to the
accounting server for notification. If there is no answer from the accounting server after T2 time, the Switch resends the
Accounting-Request to the server. The maximum number of retry times is N2.
To view this window, click Security > IGMP Access Control Settings as shown below:
The fields that can be configured are described below:
Parameter
Unit
From Port / To Port
State
Click the Apply button to accept the changes made.
Description
Select the unit you want to configure.
Use the drop-down menus to select a range of ports to be enabled as compound
authentication ports.
Use the drop-down menu to configure the IGMP authentication status. If no parameter is
chosen, Auth_accounting will be selected. This is for compatible application.
Disable - Disables both the authentication and accounting function on the specified port.
Auth_accounting - After the client authenticated, the accounting message will be sent to
the RADIUS.
Auth_only - After the client authenticated, the accounting message will not be sent to the
RADIUS.
Accounting_only - Authentication is not needed. If the client joins a group, the
accounting message will be sent to the RADIUS.
322