D-Link DGS-1510-20 User Manual - Page 344

DGS-1510 Series Gigabit Ethernet SmartPro Switch Web UI Reference Guide Host Mode VID List CompAuth Mode Max Users Periodic ReAuth Timer Inactivity State Inactivity Timer Restart Select the host mode option that will be associated with the selected port(s) here. Options to choose from are Multi Host and Multi Auth. If the port is operated in the multi-host mode, and if one of the hosts is authenticated, then all other hosts are allowed to access the port. According to 802.1X authentication, if the re-authentication fails or the authenticated user logs off, the port will be blocked for a quiet period. The port restores the processing of EAPOL packets after the quiet period. If the port is operated in the multi-authenticated mode, then each host needs to be authenticated individually to access the port. A host is represented by its MAC address. Only the authorized host is allowed to access. After selecting the Multi Auth option as the Host Mode, the following parameter is available. Enter the VLAN ID used here. This is useful when different VLANs on the Switch have different authentication requirements. After the client is authenticated, the client will not be reauthenticated when received from other VLANs. This option is useful for trunk ports to do per-VLAN authentication control. When a port's authentication mode is changed to multi-host, the previous authentication VLAN(s) on this port will be cleared. Select the compound authentication mode option here. Options to choose from are Any, MAC-JWAC, and MAC-WAC. Selecting Any specifies that if any of the authentication method (802.1X, MAC-based Access Control, WAC, or JWAC) to passes, then pass. Selecting MAC-JWAC specifies to verify MAC-based authentication first. If the client passes, JWAC will be verified next. Both authentication methods need to be passed. Selecting MAC-WAC specifies to verify MACbased authentication first. If the client passes, WAC will be verified next. Both authentication methods need to be passed. Enter the maximum users value used here. This value must be between 1 and 1000. Select to enable or disable periodic re-authentication for the selected port here. This parameter only affects the 802.1X protocol. Enter the re-authentication timer value here. This value must be between 1 and 65535 seconds. By default, this value is 3600 seconds. Select to enable or disable the inactivity state here. Select the Time option to enable this feature. When the Inactivity State is enabled, enter the inactivity timer value here. This value must be between 120 and 65535 seconds. This parameter only affects the WAC and JWAC authentication protocols. Enter the restart time value used here. This value must be between 1 and 65535 seconds. Click the Apply button to accept the changes made. Network Access Authentication Sessions Information This window is used to view and clear the network access authentication session information. To view the following window, click Security > Network Access Authentication > Network Access Authentication Sessions Information, as shown below: 336