3Com 3C17300A Implementation Guide - Page 85

What is Disconnect Unauthorized Device (DUD)?, How DUD Works, What is RADIUS?

Get 3Com 3C17300A - Switch 4200 PDF manuals and user guides
UPC - 662705493169
View all 3Com 3C17300A manuals
Add to My Manuals
Save this manual to your list of manuals

Page 85 highlights

What is Disconnect Unauthorized Device (DUD)? 85 What is Disconnect Unauthorized Device (DUD)? The port security feature Disconnect Unauthorized Device (DUD), disables a port if an unauthorized client device transmits data on it. DUD may be automatically enabled when a port is set to one of the following port security modes: ■ Automatic Learning ■ Network Login (Secure) ■ Learning off How DUD Works Disconnect Unauthorized Device (DUD) protects the network by checking the source MAC address of each packet received on a port against the authorized addresses for that port. You can configure DUD to perform one of the following actions if an unauthorized client device transmits data on the port: ■ Permanently disable the port - The port is disabled and data from the unauthorized client device is not transmitted. ■ Temporarily disable the port - The port is disabled for 20 seconds. When the time period has expired the port is re-enabled; if the port is set to one of the Network Login security modes, the client device is authenticated again. ■ Do not disable the port - The port is not disabled and data from authorized client devices will continue to be transmitted, whilst data from unauthorized client devices will be filtered. What is RADIUS? Remote Authentication Dial-In User Service (RADIUS) is an industry standard protocol for carrying authentication, authorization and configuration information between a network device and a shared authentication server. Transactions between each network device and the server are authenticated by the use of a shared secret. Additional security is provided by encryption of passwords to prevent interception by a network snooper. RADIUS is defined in the RFCs 2865 and 2866, "Remote Authentication Dial-in User Service (RADIUS)" and "RADIUS Accounting". Network Login and Rada both utilize the RADIUS protocol.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
What is Disconnect Unauthorized Device (DUD)?
85
What is Disconnect
Unauthorized
Device (DUD)?
The port security feature Disconnect Unauthorized Device (DUD), disables
a port if an unauthorized client device transmits data on it.
DUD may be automatically enabled when a port is set to one of the
following port security modes:
■
Automatic Learning
■
Network Login (Secure)
■
Learning off
How DUD Works
Disconnect Unauthorized Device (DUD) protects the network by checking
the source MAC address of each packet received on a port against the
authorized addresses for that port.
You can configure DUD to perform one of the following actions if an
unauthorized client device transmits data on the port:
■
Permanently disable the port
— The port is disabled and data from the
unauthorized client device is not transmitted.
■
Temporarily disable the port — The port is disabled for 20 seconds.
When the time period has expired the port is re-enabled; if the port is
set to one of the Network Login security modes, the client device is
authenticated again.
■
Do not disable the port
— The port is not disabled and data from
authorized client devices will continue to be transmitted, whilst data
from unauthorized client devices will be filtered.
What is RADIUS?
Remote Authentication Dial-In User Service (RADIUS) is an industry
standard protocol for carrying authentication, authorization and
configuration information between a network device and a shared
authentication server. Transactions between each network device and the
server are authenticated by the use of a shared secret. Additional security
is provided by encryption of passwords to prevent interception by a
network snooper.
RADIUS is defined in the RFCs 2865 and 2866, “Remote Authentication
Dial-in User Service (RADIUS)” and “RADIUS Accounting”.
Network Login and Rada both utilize the RADIUS protocol.