D-Link DGS-3627G Product Manual - Page 387

xStack® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Conditions and Limitations 1. The subnet of the authentication VLAN's IP interface must be the same as that of the client. If not configured properly, the authentication will be permanently denied by the authenticator. It cannot be a Guest VLAN. 2. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address. 3. The authentication VLAN of this function must be configured to access a DNS server to improve CPU performance, and allow the processing of DNS, UDP and HTTP packets. 4. Certain functions exist on the Switch that will filter HTTP packets, such as the Access Profile function. The user needs to be very careful when setting filter functions for the target VLAN, so that these HTTP packets are not denied by the Switch. 5. The Redirection Path must be set before the Web-based Access Control can be enabled. If not, the user will be prompted with an error message and the Web-based Access Control will not be enabled. 6. If a RADIUS server is to be used for authentication, the user must first establish a RADIUS Server with the appropriate parameters, including the target VLAN, before enabling the Web-based Access Control on the Switch. WAC Global Settings This window is used to enable and configure the Web-based Access Control Global State on the Switch. To view this window, click Security > Web-based Access Control (WAC) > WAC Global Settings, as shown below: Figure 7- 34. WAC Global Settings window To set the Web-based Access Control for the Switch, complete the following fields: Parameter Description WAC Global Settings 371