D-Link DWS-4026 [415/741] Port access control

PortAccessControl

D-Link UnifiedWiredandWirelessAccessSystem

November2011 Page415

D‐LinkUWSUserManual

PortAccessControl

Inport‐basedauthenticationmode,when802.1Xisenabledgloballyandontheport, successfulauthentication

ofanyonesupplicantattachedtotheportresultsinallusersbeingabletousetheportwithoutrestrictions.At

anygiventime,onlyonesupplicantisallowedtoattemptauthenticationonaportinthismode.Po

rtsinthis

modeareunderbidirectionalcontrol.Thisisthedefaultauthenticationmode.

The802.1Xnetworkhasthreecomponents:

• Authenticators:Specifiestheportthatisauthenticatedbeforepermittingsystemaccess.

• Supplicants:Specifieshostconnectedtotheauthenticatedportrequestingaccesstothesystemservices.

• AuthenticationServer:Specifie

stheexternalserver,forexample,theRADIUSserverthatperformsthe

authenticationonbehalfoftheauthenticator,andindicateswhethertheuserisauthorizedtoaccess

systemservices.

GlobalPortAccessControlConfiguration

UsethePortBasedAccessControlConfigurationpagetoenableordisableportaccesscontrolonthesystem.

TodisplaythePortBasedAuthenticationpage,clickLAN>Security>PortAccessControl>Configurationin

thenavigationmenu.

Figure292:GlobalPortAccessControlConfiguration

Table246:GlobalPortAccessControlConfigurationFi

elds

Field Description

AdministrativeMode SelectEnableorDisable802.1xmodeontheswitch.ThedefaultisDisable.

Thisfeaturepermitsport‐ba sedauthenticationontheswitch.

VLANAssignmentMode Ifenabled,whenasupplicantisauthenticatedbyaauthenticationserver,the

portthatthesupplicantisconnectedtoisplacedinaparticularVLANspecifie

d

bytheRADIUSserver.VLANAssignmentmodecontrolsiftheswitchisallowed

toplaceaportinaRADIUS‐assignedVLAN.Aport’sVLANassignmentis

determinedbythefirstsupplicantthatisauthenticatedontheport.