Home » D-Link Manuals » Hubs & Switches » D-Link DES-3528 » Manual Viewer

D-Link DES-3528 Product Manual - Page 255

Compound Authentication Guest VLAN Settings

UPC - 790069314346

Add to My Manuals
Save this manual to your list of manuals

Page 255 highlights

xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide whether an individual security module is active on a port depends on its system state. As system states of WAC and JWAC are mutually exclusive, only one of them will be active on a port at the same time. 802.1X+IMPB - 802.1X will be verified first, and then IMPB will be verified. Both authentication methods need to be passed. IMPB+JWAC - IMPB will be verified first, and then JWAC will be verified. Both authentication methods need to be passed. IMPB+WAC - IMPB will be verified first, and then WAC will be verified. Both authentication methods need to be passed. MAC+IMPB - MAC will be verified first, and then IMPB will be verified. Both authentication methods need to be passed. Authorized Mode Toggle between Host-based and Port-based. When Port-based is selected, if one of the attached hosts passes the authentication, all hosts on the same port will be granted access to the network. If the user fails the authorization, this port will keep trying the next authentication method. When Host-based is selected, users are authenticated individually. VID List (e.g.: 1, 6-9) Enter a list of VLAN ID. State Use the drop-down menu to assign or remove the specified VID list as authentication VLAN(s). Click the Apply button to accept the changes made for each individual section. Compound Authentication Guest VLAN Settings Users can assign ports to or remove ports from a guest VLAN. To view this window, click Security > Compound Authentication > Compound Authentication Guest VLAN Settings, as shown below: Figure 8-48 Compound Authentication Guest VLAN Settings window The fields that can be configured are described below: Parameter Description VLAN Name Click the button and assign a VLAN as a Guest VLAN. The VLAN must be an existing static VLAN. VID (1-4094) Click the button and assign a VLAN ID for a Guest VLAN. The VLAN must be an existing static VLAN before this VID can be configured. Port List (e.g.: 1:1, 1:6- The list of ports to be configured. Alternatively, tick the All Ports check box to set every 1:9) port at once. Action Use the drop-down menu to choose the desired operation: Create VLAN, Add Ports, or Delete Ports. Click the Apply button to accept the changes made. Click the Delete button to remove the specific entry. Once properly configured, the Guest VLAN and associated ports will be listed in the lower part of the window. 246

Section	Page
Intended Readers	10
Typographical Conventions	10
Notes, Notices and Cautions	10
Chapter 1 Web-based Switch Configuration	11
Introduction	11
Login to the Web Manager	11
Web-based User Interface	12
Web Pages	13
Chapter 2 System Configuration	14
Device Information	14
System Information Settings	15
Dual Configuration Settings	16
Firmware Information Settings	17
Port Configuration	18
PoE	21
Serial Port Settings	24
System Log configuration	25
Time Range Settings	29
Time Settings	29
User Accounts Settings	30
Stacking	31
Chapter 3 Management	35
ARP	35
Gratuitous ARP	37
IPv6 Neighbor Settings	38
IP Interface	39
Management Settings	43
Session Table	44
Single IP Management	44
SNMP Settings	54
Telnet Settings	64
Web Settings	64
Chapter 4 L2 Features	65
VLAN	65
Q-in-Q	88
Layer 2 Protocol Tunneling Settings	90
Spanning Tree	91
Link Aggregation	100
FDB	103
L2 Multicast Control	107
Multicast Filtering	132
ERPS Settings	136
LLDP	139
Chapter 5 L3 Features	149
Local Route Settings	149
IPv4 Static/Default Route Settings	149
IPv4 Route Table	150
IPv6 Static/Default Route Settings	151
IPv6 Route Table	151
Policy Route Settings	152
IP Forwarding Table	153
Chapter 6 QoS	154
802.1p Settings	156
Bandwidth Control	159
Traffic Control Settings	161
DSCP	164
HOL Blocking Prevention	167
Scheduling Settings	168
SRED	171
Chapter 7 ACL	174
ACL Configuration Wizard	174
Access Profile List	175
CPU Access Profile List	193
ACL Finder	207
ACL Flow Meter	208
Chapter 8 Security	211
802.1X	211
RADIUS	224
IP-MAC-Port Binding (IMPB)	229
MAC-based Access Control (MAC)	236
Web-based Access Control (WAC)	240
Japanese Web-based Access Control (JWAC)	245
Compound Authentication	252
Port Security	256
ARP Spoofing Prevention Settings	258
BPDU Attack Protection	259
Loopback Detection Settings	261
Traffic Segmentation Settings	262
NetBIOS Filtering Settings	263
DHCP Server Screening	264
Access Authentication Control	265
SSL Settings	274
SSH	276
Trusted Host Settings	280
Safeguard Engine Settings	281
Chapter 9 Network Application	284
DHCP	284
DNS	296
PPPoE Circuit ID Insertion Settings	298
SNTP	299
Chapter 10 OAM	302
CFM	302
Ethernet OAM	311
DULD Settings	315
Cable Diagnostics	316
Chapter 11 Monitoring	318
Utilization	318
Statistics	320
Mirror	332
sFlow	334
Ping Test	337
Trace Route	338
Peripheral	340
Chapter 12 Save and Tools	341
Save Configuration ID 1	341
Save Configuration ID 2	341
Save Log	342
Save All	342
Stacking Information	342
Download Firmware	344
Download Configuration File	344
Upload Configuration File	345
Upload Log File	346
Reset	347
Reboot System	347
Appendix A Mitigating ARP Spoofing Attacks Using Packet Content ACL	348
How Address Resolution Protocol Works	348
How ARP Spoofing Attacks a Network	350
Prevent ARP Spoofing via Packet Content ACL	351
Configuration	351
Appendix B System Log and Trap List	354
System Log Entries	354
DES-3528/DES-3552 Series Trap List	362
Proprietary Trap List	362
Appendix C Password Recovery Procedure	365

Match case Limit results 1 per page

xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide

whether an individual security module is active on a port depends on its system

state. As system states of WAC and JWAC are mutually exclusive, only one of

them will be active on a port at the same time.

802.1X+IMPB

- 802.1X will be verified first, and then IMPB will be verified. Both

authentication methods need to be passed.

IMPB+JWAC

- IMPB will be verified first, and then JWAC will be verified. Both

authentication methods need to be passed.

IMPB+WAC

- IMPB will be verified first, and then WAC will be verified. Both

authentication methods need to be passed.

MAC+IMPB

- MAC will be verified first, and then IMPB will be verified. Both

authentication methods need to be passed.

Authorized Mode

Toggle between

Host-based

and

Port-based

. When

Port-based

is selected, if

one of the attached hosts passes the authentication, all hosts on the same port

will be granted access to the network. If the user fails the authorization, this port

will keep trying the next authentication method. When

Host-based

is selected,

users are authenticated individually.

VID List (e.g.: 1, 6-9)

Enter a list of VLAN ID.

State

Use the drop-down menu to assign or remove the specified VID list as

authentication VLAN(s).

Click the

Apply

button to accept the changes made for each individual section.

Compound Authentication Guest VLAN Settings

Users can assign ports to or remove ports from a guest VLAN.

To view this window, click

Security > Compound Authentication > Compound Authentication Guest VLAN

Settings

, as shown below:

Figure 8-48 Compound Authentication Guest VLAN Settings window

The fields that can be configured are described below:

Parameter

Description

VLAN Name

Click the button and assign a VLAN as a Guest VLAN. The VLAN must be an existing

static VLAN.

VID (1-4094)

Click the button and assign a VLAN ID for a Guest VLAN. The VLAN must be an existing

static VLAN before this VID can be configured.

Port List (e.g.: 1:1, 1:6-

1:9)

The list of ports to be configured. Alternatively, tick the All Ports check box to set every

port at once.

Action

Use the drop-down menu to choose the desired operation:

Create VLAN

Add Ports

, or

Delete Ports

Click the

Apply

button to accept the changes made.

Click the

Delete

button to remove the specific entry.

Once properly configured, the Guest VLAN

and associated ports will be listed in the lower part of the window.

246