D-Link DGS-1500-20 User Manual - Page 79

AAA > 802.1X > 802.1X User, ACL > ACL Wizard - 52 firmware

Page 79 highlights

5 Configuration D-Link Web Smart Switch User Manual SuppTimeout (1 - 65535): This value determines timeout conditions in the exchanges between the Authenticator and the client. Default is 30 seconds. MaxReq (1 - 10): This parameter specifies the maximum number of times that the switch retransmits an EAP request (md-5challnege) to the client before it times out the authentication session. Default is 2 times. ReAuthPeriod (1 - 65535): A constant that defines a nonzero number of seconds between periodic reauthentication of the client. The default setting is 3600 seconds. Port Control: This allows user to control the port authorization state. Select ForceAuthorized to disable 802.1X and cause the port to transition to the authorized state without any authentication exchange required. This means the port transmits and receives normal traffic without 802.1X-based authentication of the client. If ForceUnauthorized is selected, the port will remain in the unauthorized state, ignoring all attempts by the client to authenticate. The Switch cannot provide authentication services to the client through the interface. If Auto is selected, it will enable 802.1X and cause the port to begin in the unauthorized state, allowing only EAPOL frames to be sent and received through the port. The authentication process begins when the link state of the port transitions from down to up, or when an EAPOL-start frame is received. The Switch then requests the identity of the client and begins relaying authentication messages between the client and the authentication server. The default setting is Auto. Direction: Sets the administrative-controlled direction on the port. The possible field values are: Both - Specify the control is exerted over both incoming and outgoing traffic through the controlled port selected in the first field. In - Disables the support in the present firmware release. Click Apply to implement configuration changes. AAA > 802.1X > 802.1X User The 802.1X User page allows user to set different local users on the Switch. Enter 802.1X User name, Password and Confirm Password. Properly configured local users will be displayed in the table. The numbers of local username is 100. Figure 5.99 - AAA > 802.1X > 802.1X User Click Add to add a new 802.1X user. ACL > ACL Wizard Access Control List (ACL) allows you to establish criteria to determine whether or not the Switch will forward packets based on the information contained in each packet's header. This criteria can be specified on a basis of the MAC address, or IP address. The ACL Configuration Wizard will aid with the creation of access profiles and ACL Rules. The ACL Wizard will create the access rule and profile automatically. For DGS-1500-20/28, the maximum usable profiles are 50 and with 200 Rules in total for the switch. For DGS-1500-52, the maximum usable profiles are 50 and with 450 Rules in total for the switch. 73

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115

5
Configuration
D-Link Web Smart Switch User Manual
73
SuppTimeout (1 – 65535):
This value determines timeout conditions in the exchanges between the
Authenticator and the client. Default is
30
seconds.
MaxReq (1 – 10):
This parameter specifies the maximum number of times that the switch retransmits an
EAP request (md-5challnege) to the client before it times out the authentication session. Default is
2
times.
ReAuthPeriod (1 – 65535):
A constant that defines a nonzero number of seconds between periodic
reauthentication of the client. The default setting is
3600
seconds.
Port Control:
This allows user to control the port authorization state.
Select
ForceAuthorized
to disable 802.1X and cause the port to transition to the authorized state
without any authentication exchange required. This means the port transmits and receives normal
traffic without 802.1X-based authentication of the client.
If
ForceUnauthorized
is selected, the port will remain in the unauthorized state, ignoring all
attempts by the client to authenticate. The Switch cannot provide authentication services to the client
through the interface.
If
Auto
is selected, it will enable 802.1X and cause the port to begin in the unauthorized state,
allowing only EAPOL frames to be sent and received through the port. The authentication process
begins when the link state of the port transitions from down to up, or when an EAPOL-start frame is
received. The Switch then requests the identity of the client and begins relaying authentication
messages between the client and the authentication server.
The default setting is
Auto
.
Direction:
Sets the administrative-controlled direction on the port. The possible field values are:
Both –
Specify the control is exerted over both incoming and outgoing traffic through the controlled
port selected in the first field.
In –
Disables the support in the present firmware release.
Click
Apply
to implement configuration changes.
AAA > 802.1X > 802.1X User
The
802.1X User
page allows user to set different local users on the Switch. Enter
802.1X User
name,
Password
and
Confirm Password
. Properly configured local users will be displayed in the table. The
numbers of local username is 100.
Figure 5.99 – AAA > 802.1X > 802.1X User
Click
Add
to add a new 802.1X user.
ACL > ACL Wizard
Access Control List (ACL) allows you to establish criteria to determine whether or not the Switch will forward
packets based on the information contained in each packet's header. This criteria can be specified on a
basis of the MAC address, or IP address.
The ACL Configuration Wizard will aid with the creation of access profiles and ACL Rules. The ACL Wizard
will create the access rule and profile automatically. For DGS-1500-20/28, the maximum usable profiles are
50 and with 200 Rules in total for the switch. For DGS-1500-52, the maximum usable profiles are 50 and with
450 Rules in total for the switch.