D-Link DGS-3612G Product Manual - Page 408

xStack® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Guest VLAN Name Select the method of identification, Guest VLAN name, before entering the name of the Guest VLAN being used for this function. Guest VLAN ID Select the method of identification, Guest VLAN ID, before entering the ID of the Guest VLAN being used for this function. Guest VLAN Member Ports Enter the list of ports that you wish to configure for the Guest VLAN. Max User (1-4000) Enter the number of maximum users from 1 to 4000. The default value is 1024. MAC-based Access Control Authorization Network Settings RADIUS Authorization Enable or disable RADIUS authorization. Local Authorization Enable or disable local authorization. MAC-based Access Control Port Settings Unit Enter the unit to configure. From/To Enter the Port range. State Use the pull-down menu to enable or disable the MAC-based Access Control function on individual ports. Mode Port-based: In this mode, if one of the attached hosts is successfully authorized, all hosts on the same port will be granted access to the network. If the port authorization fails, this port will continue authenticating. Host-based: In this mode, every user can individually authenticate and access the network. Max User (1-4000) Enter the number of maximum users from 1 to 4000. Alternatively, tick the No Limit check box. Aging Time (1-1440 min) A time period (configurable per port) between 1-1440 minutes, during which an authenticated host will stay in an authenticated state. When the aging time has expired, the host will be moved back to an unauthenticated state. Alternatively, tick the Infinite check box.When aging time is set to infinite, it will disable the aging time. Block Time (1-300 sec) If a host fails to pass the authentication it will be blocked for a period of time referred to as hold time (per port configurable). During this time, this host can't proceed to the authenticating process (unless the user clears the database manually). As a result, this hold mechanism can prevent the switch from frequent authentication which consumes too much computing power. Alternatively, tick the Infinite check box. Click Apply to implement settings. MAC-based Access Control Local MAC Settings The following window is used to set a list of MAC addresses, along with their corresponding target VLAN, which will be authenticated for the Switch. Once a queried MAC address is matched in this table, it will be placed in the VLAN associated with it here. The switch administrator may enter up to 1024 MAC addresses to be authenticated using the local method configured here. To enable these settings, click Security > MAC-based Access Control > MAC-based Access Control Local MAC Settings, as shown below: 392