D-Link DES-3326SR — настройка управления доступом и безопасности в сетевых коммутаторах [87/240]

Превью страниц Страница 87 / 240

D-Link DES-3326SR Layer 3 Switch

Chapter 14

Security Management

Access Profile Configuration

CPU Interface Filtering

802.1X Port-based Network Access Control

802.1X Configuration

Various security mechanisms are available with the DES-3326S including those discussed in this chapter. Other

techniques are used to improve the security environment that are not included in this chapter but are discussed in

other chapters. This chapter is dedicated to setting up Access Profiles and 802.1X configuration.

Access Profile Configuration

Access profiles allow you to establish criteria to determine if the Switch will forward packets based on the

information contained in each packet’s header. These criteria can be specified on a basis of VLAN, MAC

address or IP address. First, create the Access Profile Mask, then, define the rules used to allow access.

Access Profile Mask

Creating an access profile is divided into two basic parts. The first is to specify which part or parts of a frame

the switch will examine, such as the MAC source address or the IP destination address. The second part is

entering the criteria the switch will use to determine what to do with the frame. The entire process is described

below in two parts.

Figure 14- 1. Access Profile Mask Setting Table

To create an Access Profile Mask:

Click the New button in the Access Profile Mask Setting summary table page. A new menu is displayed. Use this

to create an access profile and specify what criteria are used to examine frames. Once the profile has been

created you can set up the rule applied to the profile as described later in this section.