Home » D-Link Manuals » Hubs & Switches » D-Link DGS-3620-52P » Manual Viewer

D-Link DGS-3620-52P Web UI Reference Guide - Page 355

WAC Global Settings, Security > Web-based Access Control WAC > WAC Global Settings

View all D-Link DGS-3620-52P manuals

Add to My Manuals
Save this manual to your list of manuals

Page 355 highlights

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch Web UI Reference Guide Conditions and Limitations 1. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address. 2. Certain functions exist on the Switch that will filter HTTP packets, such as the Access Profile function. The user needs to be very careful when setting filter functions for the target VLAN, so that these HTTP packets are not denied by the Switch. 3. If a RADIUS server is to be used for authentication, the user must first establish a RADIUS Server with the appropriate parameters, including the target VLAN, before enabling Web Authentication on the Switch. WAC Global Settings Users can configure the Switch for the Web-based access control function. To view this window, click Security > Web-based Access Control (WAC) > WAC Global Settings as shown below: Figure 8-29 WAC Global Settings window The fields that can be configured are described below: Parameter Description WAC Global State Use this selection menu to either enable or disable the Web Authentication on the Switch. Virtual IP Enter a virtual IP address. This address is only used by WAC and is not known by any other modules of the Switch. Virtual IPv6 Enter a virtual IPv6 address. This address is only used by WAC and is not known by any other modules of the Switch. Redirection Path Enter the URL of the website that authenticated users placed in the VLAN are directed to once authenticated. Clear Redirection Path The user can enable or disable this option to clear the redirection path. RADIUS Authorization The user can enable or disable this option to enable RADIUS Authorization or not. Local Authorization The user can enable or disable this option to enable Local Authorization or not. Method Use this drop-down menu to choose the authenticator for Web-based Access Control. The user may choose: Local - Choose this parameter to use the local authentication method of the Switch as the authenticating method for users trying to access the network via the switch. This is, in fact, the username and password to access the Switch configured using the WAC User Settings window seen below. RADIUS - Choose this parameter to use a remote RADIUS server as the authenticating method for users trying to access the network via the switch. This RADIUS server must have already been pre-assigned by the administrator using the Authentication RADIUS Server Settings window. HTTP(S) Port (1-65535) Enter a HTTP port number. Port 80 is the default. 345

Section	Page
Intended Readers	11
Typographical Conventions	11
Notes, Notices and Cautions	11
Safety Instructions	11
Safety Cautions	12
General Precautions for Rack-Mountable Products	13
Protecting Against Electrostatic Discharge	14
Chapter 1 Web-based Switch Configuration	15
Introduction	15
Login to the Web Manager	15
Web-based User Interface	16
Areas of the User Interface	16
Web Pages	17
Chapter 2 System Configuration	18
Device Information	18
System Information Settings	19
Port Configuration	19
Port Settings	19
Port Description Settings	21
Port Error Disabled	22
Port Auto Negotiation Information	23
Jumbo Frame Settings	24
PoE	24
PoE System Settings	25
PoE Port Settings	26
Serial Port Settings	27
Warning Temperature Settings	27
System Log configuration	28
System Log Settings	28
System Log Server Settings	28
System Log	29
System Log & Trap Settings	30
System Severity Settings	31
Time Range Settings	31
Port Group Settings	32
Time Settings	32
User Accounts Settings	33
Command Logging Settings	34
Stacking	34
Stacking Device Table	36
Stacking Mode Settings	36
Chapter 3 Management	38
ARP	38
Static ARP Settings	38
Proxy ARP Settings	39
ARP Table	39
Gratuitous ARP	40
Gratuitous ARP Global Settings	40
Gratuitous ARP Settings	40
IPv6 Neighbor Settings	41
IP Interface	42
System IP Address Settings	42
Interface Settings	43
Loopback Interface Settings	46
Management Settings	47
Out of Band Management Settings	49
Session Table	49
Single IP Management	49
Single IP Settings	51
Topology	52
Firmware Upgrade	58
Configuration File Backup/Restore	59
Upload Log File	59
SNMP Settings	59
SNMP Global Settings	60
SNMP Traps Settings	61
SNMP Linkchange Traps Settings	61
SNMP View Table Settings	62
SNMP Community Table Settings	63
SNMP Group Table Settings	64
SNMP Engine ID Settings	65
SNMP User Table Settings	65
SNMP Host Table Settings	66
SNMPv6 Host Table Settings	67
RMON Settings	68
SNMP Community Encryption Settings	68
SNMP Community Masking Settings	68
Telnet Settings	69
Web Settings	69
Chapter 4 L2 Features	71
VLAN	71
802.1Q VLAN Settings	76
802.1v Protocol VLAN	79
802.1v Protocol Group Settings	79
802.1v Protocol VLAN Settings	80
Asymmetric VLAN Settings	81
GVRP	81
GVRP Global Settings	81
GVRP Port Settings	82
MAC-based VLAN Settings	83
Private VLAN Settings	83
PVID Auto Assign Settings	85
Subnet VLAN	85
Subnet VLAN Settings	85
VLAN Precedence Settings	86
Super VLAN	87
Super VLAN Settings	87
Sub VLAN Settings	88
Voice VLAN	89
Voice VLAN Global Settings	89
Voice VLAN Port Settings	90
Voice VLAN OUI Settings	91
Voice VLAN Device	91
Voice VLAN LLDP-MED Voice Device	91
VLAN Trunk Settings	92
Browse VLAN	93
Show VLAN Ports	93
QinQ	93
QinQ Settings	95
VLAN Translation Settings	96
Layer 2 Protocol Tunneling Settings	96
Spanning Tree	97
STP Bridge Global Settings	99
STP Port Settings	100
MST Configuration Identification	102
STP Instance Settings	103
MSTP Port Information	103
Link Aggregation	104
Port Trunking Settings	105
LACP Port Settings	106
FDB	107
Static FDB Settings	107
Unicast Static FDB Settings	107
Multicast Static FDB Settings	108
MAC Notification Settings	108
MAC Address Aging Time Settings	109
MAC Address Table	110
ARP & FDB Table	111
L2 Multicast Control	111
IGMP Proxy	111
IGMP Proxy Settings	111
IGMP Proxy Downstream Settings	112
IGMP Proxy Group	113
IGMP Snooping	113
IGMP Snooping Settings	113
IGMP Snooping Rate Limit Settings	115
IGMP Snooping Static Group Settings	116
IGMP Router Port	117
IGMP Snooping Group	118
IGMP Snooping Forwarding Table	118
IGMP Snooping Counter	119
MLD Proxy	120
MLD Proxy Settings	120
MLD Proxy Downstream Settings	121
MLD Proxy Group	121
MLD Snooping	122
MLD Snooping Settings	122
MLD Snooping Rate Limit Settings	124
MLD Snooping Static Group Settings	125
MLD Router Port	126
MLD Snooping Group	126
MLD Snooping Forwarding Table	127
MLD Snooping Counter	128
Multicast VLAN	129
IGMP Multicast Group Profile Settings	129
IGMP Snooping Multicast VLAN Settings	130
MLD Multicast Group Profile Settings	132
MLD Snooping Multicast VLAN Settings	133
Multicast Filtering	135
IPv4 Multicast Filtering	135
IPv4 Multicast Profile Settings	135
IPv4 Limited Multicast Range Settings	136
IPv4 Max Multicast Group Settings	137
IPv6 Multicast Filtering	137
IPv6 Multicast Profile Settings	137
IPv6 Limited Multicast Range Settings	138
IPv6 Max Multicast Group Settings	139
Multicast Filtering Mode	140
ERPS Settings	140
LLDP	144
LLDP	144
LLDP Global Settings	144
LLDP Port Settings	145
LLDP Management Address List	146
LLDP Basic TLVs Settings	146
LLDP Dot1 TLVs Settings	147
LLDP Dot3 TLVs Settings	148
LLDP Statistic System	150
LLDP Local Port Information	150
LLDP Remote Port Information	151
LLDP-MED	152
LLDP-MED System Settings	152
LLDP-MED Port Settings	152
LLDP-MED Local Port Information	153
LLDP-MED Remote Port Information	154
NLB FDB Settings	154
PTP	155
PTP Global Settings	155
PTP Port Settings	156
PTP Boundary Clock Settings	157
PTP Boundary Port Settings	158
PTP Peer to Peer Transparent Port Settings	159
PTP Clock Information	160
PTP Port Information	160
PTP Foreign Master Records Port Information	160
Chapter 5 L3 Features	162
IPv4 Static/Default Route Settings	162
IPv4 Route Table	163
IPv6 Static/Default Route Settings	164
IPv6 Route Table	165
Policy Route Settings	165
IP Forwarding Table	166
IP Multicast Forwarding Table	166
IP Multicast Interface Table	167
Static Multicast Route Settings	167
Route Preference Settings	168
ECMP Algorithm Settings	168
Route Redistribution Settings	169
IP Tunnel (EI Mode Only)	170
IP Tunnel Settings	170
IP Tunnel GRE Settings	171
OSPF	172
OSPFv2	192
OSPF Global Settings	192
OSPF Area Settings	192
OSPF Interface Settings	193
OSPF Virtual Link Settings	195
OSPF Area Aggregation Settings	196
OSPF Host Router Settings	197
OSPF LSDB Table	197
OSPF Neighbor Table	198
OSPF Virtual Neighbor Table	198
OSPFv3 (EI Mode Only)	199
OSPFv3 Global Settings	199
OSPFv3 Area Settings	199
OSPFv3 Interface Settings	200
OSPFv3 Virtual Interface Settings	202
OSPFv3 Area Aggregation Settings	203
OSPFv3 LSDB Table	203
OSPFv3 LSDB AS External LSA Table	204
OSPFv3 LSDB Link LSA Interface Table	204
OSPFv3 Neighbor Table	205
OSPFv3 Virtual Neighbor Table	205
RIP	206
RIP Settings	207
RIPng (EI Mode Only)	209
RIPng Global Settings	209
RIPng Interface Settings	209
IP Multicast Routing Protocol	210
IGMP	210
IGMP Interface Settings	212
IGMP Check Subscriber Source Network Settings	213
IGMP Group Table	214
MLD	215
MLD Interface Settings	215
MLD Group Table	216
DVMRP (EI Mode Only)	217
DVMRP Interface Settings	217
DVMRP Routing Table	218
DVMRP Neighbor Table	218
DVMRP Routing Next Hop Table	219
PIM	219
PIM for IPv4	221
PIM Global Settings	221
PIM Interface Settings	222
PIM Candidate BSR Settings	223
PIM Candidate RP Settings	224
PIM Static RP Settings	225
PIM Register Checksum Settings	225
PIM Neighbor Table	226
PIM Multicast Route Table	226
PIM RP-Set Table	226
PIM SSM Settings	227
PIM for IPv6 (EI Mode Only)	227
PIM for IPv6 Global Settings	227
PIM for IPv6 Interface Settings	228
PIM for IPv6 Candidate BSR Settings	230
PIM for IPv6 Candidate RP Settings	230
PIM for IPv6 Static RP Settings	231
PIM for IPv6 Neighbor Table	231
PIM for IPv6 Multicast Route Table	232
PIM for IPv6 RP-Set Table	234
PIM for IPv6 Multicast Route Star-G Table	234
PIM for IPv6 Multicast Route S-G Table	235
VRRP	238
VRRP Global Settings	238
VRRP Virtual Router Settings	239
VRRP Authentication Settings	241
BGP (EI Mode Only)	241
BGP Global Settings	242
BGP Aggregate Address Settings	243
BGP Network Settings	244
BGP Dampening Settings	245
BGP Peer Group Settings	246
BGP Neighbor	247
BGP Neighbor Group Settings	247
BGP Neighbor Description Settings	247
BGP Neighbor Password Settings	248
BGP Neighbor Session Settings	249
BGP Neighbor Maximum Prefix Settings	249
BGP Neighbor General Settings	250
BGP Neighbor Timer Settings	251
BGP Neighbor Map Settings	252
BGP Neighbor Filter Settings	253
BGP Neighbor Table	253
BGP Reflector Settings	255
BGP Confederation Settings	255
BGP AS Path Access Settings	256
BGP Community List Settings	257
BGP Trap Settings	258
BGP Clear Settings	259
BGP Summary Table	260
BGP Routing Table	260
BGP Dampened Route Table	261
BGP Flap Statistic Table	261
IP Route Filter	262
IP Prefix List Settings	262
IP Standard Access List Settings	264
Route Map Settings	265
MD5 Settings	268
IGMP Static Group Settings	269
Chapter 6 QoS	270
802.1p Settings	271
802.1p Default Priority Settings	271
802.1p User Priority Settings	272
Bandwidth Control	273
Bandwidth Control Settings	273
Queue Bandwidth Control Settings	275
Traffic Control Settings	275
DSCP	278
DSCP Trust Settings	278
DSCP Map Settings	279
HOL Blocking Prevention	280
Scheduling Settings	280
QoS Scheduling	280
QoS Scheduling Mechanism	281
Chapter 7 ACL	283
ACL Configuration Wizard	283
Access Profile List	284
Adding an Ethernet ACL Profile	285
Adding an IPv4 ACL Profile	288
Adding an IPv6 ACL Profile	292
Adding a Packet Content ACL Profile	296
CPU Access Profile List	300
Adding a CPU Ethernet ACL Profile	301
Adding a CPU IPv4 ACL Profile	304
Adding a CPU IPv6 ACL Profile	308
Adding a CPU Packet Content ACL Profile	311
ACL Finder	314
ACL Flow Meter	314
Egress Access Profile List	317
Adding an Ethernet ACL Profile	318
Adding an IPv4 Egress ACL Profile	321
Adding an IPv6 Egress ACL Profile	325
Egress ACL Flow Meter	329
Chapter 8 Security	332
802.1X	332
802.1X Global Settings	335
802.1X Port Settings	336
802.1X User Settings	337
Guest VLAN Settings	338
RADIUS	339
Authentication RADIUS Server Settings	339
RADIUS Accounting Settings	340
RADIUS Authentication	341
RADIUS Account Client	342
IP-MAC-Port Binding (IMPB)	343
IMPB Global Settings	343
IMPB Port Settings	344
IMPB Entry Settings	346
MAC Block List	346
DHCP Snooping	347
DHCP Snooping Maximum Entry Settings	347
DHCP Snooping Entry	347
ND Snooping	348
ND Snooping Maximum Entry Settings	348
ND Snooping Entry	349
MAC-based Access Control (MAC)	350
MAC-based Access Control Settings	350
MAC-based Access Control Local Settings	352
MAC-based Access Control Authentication State	353
Web-based Access Control (WAC)	353
WAC Global Settings	355
WAC User Settings	356
WAC Port Settings	356
WAC Authentication State	357
WAC Customize Page	358
Japanese Web-based Access Control (JWAC)	360
JWAC Global Settings	360
JWAC Port Settings	362
JWAC User Settings	363
JWAC Authentication State	364
JWAC Customize Page Language	364
JWAC Customize Page	365
Compound Authentication	365
Compound Authentication Settings	365
Compound Authentication Guest VLAN Settings	367
Compound Authentication MAC Format Settings	367
Port Security	368
Port Security Settings	368
Port Security VLAN Settings	370
Port Security Entries	371
ARP Spoofing Prevention Settings	371
BPDU Attack Protection	372
Loopback Detection Settings	374
Traffic Segmentation Settings	375
NetBIOS Filtering Settings	376
DHCP Server Screening	377
DHCP Server Screening Port Settings	377
DHCP Offer Permit Entry Settings	378
Access Authentication Control	378
Enable Admin	379
Authentication Policy Settings	380
Application Authentication Settings	381
Authentication Server Group Settings	381
Authentication Server Settings	383
Login Method Lists Settings	384
Enable Method Lists Settings	385
Local Enable Password Settings	386
SSL Settings	386
SSH	389
SSH Settings	389
SSH Authentication Method and Algorithm Settings	390
SSH User Authentication List	392
Trusted Host Settings	393
Safeguard Engine Settings	393
Chapter 9 Network Application	396
DHCP	396
DHCP Relay	396
DHCP Relay Global Settings	396
DHCP Relay Interface Settings	398
DHCP Relay Option 60 Server Settings	399
DHCP Relay Option 60 Settings	399
DHCP Relay Option 61 Settings	400
DHCP Server	401
DHCP Server Global Settings	401
DHCP Server Exclude Address Settings	402
DHCP Server Pool Settings	402
DHCP Server Manual Binding	404
DHCP Server Dynamic Binding	404
DHCP Conflict IP	405
DHCPv6 Server	405
DHCPv6 Server Global Settings	405
DHCPv6 Server Pool Settings	406
DHCPv6 Server Dynamic Binding	408
DHCPv6 Server Interface Settings	408
DHCPv6 Relay	409
DHCPv6 Relay Global Settings	409
DHCPv6 Relay Settings	409
DHCP Local Relay Settings	410
DNS	410
DNS Relay	411
DNS Relay Global Settings	411
DNS Relay Static Settings	411
DNS Resolver	412
DNS Resolver Global Settings	412
DNS Resolver Static Name Server Settings	412
DNS Resolver Dynamic Name Server Table	413
DNS Resolver Static Host Name Settings	413
DNS Resolver Dynamic Host Name Table	414
RCP Server Settings	414
SNTP	414
SNTP Settings	414
Time Zone Settings	415
Flash File System Settings	417
Chapter 10 OAM	419
CFM (EI Mode Only)	419
CFM Settings	419
CFM Port Settings	425
CFM MIPCCM Table	426
CFM Loopback Settings	426
CFM Linktrace Settings	427
CFM Packet Counter	428
CFM Fault Table	428
CFM MP Table	429
Ethernet OAM	429
Ethernet OAM Settings	429
Ethernet OAM Configuration Settings	430
Ethernet OAM Event Log	431
Ethernet OAM Statistics	432
DULD Settings	433
Cable Diagnostics (EI Mode Only)	434
Chapter 11 Monitoring	436
Utilization	436
CPU Utilization	436
DRAM & Flash Utilization	437
Port Utilization	437
Statistics	438
Port Statistics	438
Packets	438
Received (RX)	438
UMB_Cast (RX)	439
Transmitted (TX)	441
Errors	442
Received (RX)	442
Transmitted (TX)	444
Packet Size	445
Mirror	447
Port Mirror Settings	447
RSPAN Settings	448
sFlow	449
sFlow Global Settings	449
sFlow Analyzer Server Settings	450
sFlow Flow Sampler Settings	451
sFlow Counter Poller Settings	451
Ping	452
Broadcast Ping Relay Settings	452
Ping Test	452
Trace Route	454
Peripheral	455

Match case Limit results 1 per page

xStack

DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch

Web UI Reference Guide

345

If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server

or a DHCP relay function so that client may obtain an IP address.

Conditions and Limitations

Certain functions exist on the Switch that will filter HTTP packets, such as the Access Profile function. The

user needs to be very careful when setting filter functions for the target VLAN, so that these HTTP packets

are not denied by the Switch.

If a RADIUS server is to be used for authentication, the user must first establish a RADIUS Server with the

appropriate parameters, including the target VLAN, before enabling Web Authentication on the Switch.

WAC Global Settings

Users can configure the Switch for the Web-based access control function.

To view this window, click

Security > Web-based Access Control (WAC) > WAC Global Settings

as shown

below:

Figure 8-29 WAC Global Settings window

The fields that can be configured are described below:

Parameter

Description

WAC Global State

Use this selection menu to either enable or disable the Web Authentication on the

Switch.

Virtual IP

Enter a virtual IP address. This address is only used by WAC and is not known by

any other modules of the Switch.

Virtual IPv6

Enter a virtual IPv6 address. This address is only used by WAC and is not known by

any other modules of the Switch.

Redirection Path

Enter the URL of the website that authenticated users placed in the VLAN are

directed to once authenticated.

Clear Redirection Path

The user can enable or disable this option to clear the redirection path.

RADIUS Authorization

The user can enable or disable this option to enable RADIUS Authorization or not.

Local Authorization

The user can enable or disable this option to enable Local Authorization or not.

Method

Use this drop-down menu to choose the authenticator for Web-based Access

Control. The user may choose:

Local

– Choose this parameter to use the local authentication method of the Switch

as the authenticating method for users trying to access the network via the switch.

This is, in fact, the username and password to access the Switch configured using

the WAC User Settings window seen below.

RADIUS

– Choose this parameter to use a remote RADIUS server as the

authenticating method for users trying to access the network via the switch. This

RADIUS server must have already been pre-assigned by the administrator using the

Authentication RADIUS Server Settings window.

HTTP(S) Port (1-65535)

Enter a HTTP port number. Port

is the default.