Security > Web-Based Access Control (Wac) > Wac Global Settings; Security > Web-Based Access Control (Wac) > Wac User Settings - D-Link DGS-1210/ME User Manual

4 Configuration
As all packets to a virtual IP from authenticated and authenticating hosts will be trapped to the Switch's CPU,
if the virtual IP is the same as other servers or PCs, the hosts on the WAC-enabled ports cannot
communicate with the server or PC which really own the IP address. If the hosts need to access the server
or PC, the virtual IP cannot be the same as the one of the server or PC. If a host PC uses a proxy to access
the Web, to make the authentication work properly the user of the PC should add the virtual IP to the
exception of the proxy configuration. Whether or not a virtual IP is specified, users can access the WAC
pages through the Switch's system IP. When a virtual IP is not specified, the authenticating Web request will
be redirected to the Switch's system IP.
The Switch's implementation of WAC features a user-defined port number that allows the configuration of the
TCP port for either the HTTP or HTTPS protocols. This TCP port for HTTP or HTTPS is used to identify the
HTTP or HTTPS packets that will be trapped to the CPU for authentication processing, or to access the login
page. If not specified, the default port number for HTTP is 80 and the default port number for HTTPS is 443.
If no protocol is specified, the default protocol is HTTP.
Security > Web-based Access Control (WAC) > WAC Global Settings
The WAC Global Settings page allows user can configure the Switch for Web authentication.
Figure 4.146 – Security > Web-based Access Control (WAC) > WAC Global Settings
WAC Global Settings:
WAC Global state: Enable or disable the WAC global state.
WAC Settings:
Virtual IP: Enter a virtual IP address. This address is only used by WAC and is not known by any other
modules of the Switch.
Virtual IPv6: Enter a virtual IPv6 address. This address is only used by WAC and is not known by any other
modules of the Switch.
Redirection path: Enter the URL of the website that authenticated users placed in the VLAN are directed to
once authenticated. This path must be entered into this field before the Web-based Access Control can be
enabled.
Method: Use this drop-down menu to choose the authenticator for Web-based Access Control. The user
may choose:
Local – Choose this parameter to use the local authentication method of the Switch as the
Authenticating method for users trying to access the network via the switch. This is, in fact, the user name
and password to access the Switch configured using the WAC User Settings indow (Security > Web-based
Access Control (WAC) > WAC User Settings) seen below.
RADIUS – Choose this parameter to use a remote RADIUS server as the authenticating method for
users trying to access the network via the switch. This RADIUS server must have already been pre-assigned
by the administrator using the Authentic RADIUS Server window (Security > 802.1X > Authentic RADIUS
Server).
HTTP Port (1-65535): Specify the HTTP port. The value is between 1 and 65535.
Click Apply button to take effect.
Security > Web-based Access Control (WAC) > WAC User Settings
The WAC User Settings page allows user to configure user accounts for Web User Settings.
DGS-1210 series Metro Ethernet Managed Switch User Manual
8 5
8 5