Manuals / D-Link / Computer Equipment / Switch

D-Link DES-3018 manual 802.1X Capability Settings, Click Security 802.1X 802.1X Capability

Models: DES-3018

1 260

Download 260 pages 53.54 Kb

Page 163

DES-3010F/DES-3010FL/DES-3010G/DES-3016/DES-3018/DES-3026 Fast Ethernet Switch Manual

802.1X Capability Settings

Click Security > 802.1X > 802.1X Capability

Settings to view the following window:

Figure 10- 15. 802.1X Capability Settings and Table window

To set up the Switch's 802.1X port-based authentication, select which ports are to be configured in the From and To fields. Next, enable the ports by selecting Authenticator from the drop-down menu under Capability. Click Apply to let your change take effect.

Configure the following 802.1X capability settings:

ParameterDescription

From and To

Capability

Ports being configured for 802.1X settings.

Two role choices can be selected:

Authenticator - A user must pass the authentication process to gain access to the network. None - The port will not be controlled by the 802.1X function.

150

Image 163

D-Link DES-3018 802.1X Capability Settings, Click Security 802.1X 802.1X Capability, Settings to view the following window

Contents

Manual Copyright 2008. All rights reserved Table of Contents Administration Introduction to Web-based Switch ConfigurationSnmp Manager Tool Tips L2 FeaturesCPU Interface Filtering 122 CoS 109Security 133 Monitoring 165 Glossary 210 Appendix a 200 Appendix B 203Appendix C 204 Appendix D 209Preface ConventionDescription Intended ReadersTypographical Conventions Bold fontSafety Cautions Safety InstructionsGeneral Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge Features Switch DescriptionIntroduction If MIB Gigabit Ethernet Technology Switching TechnologyEthernet Technology Fast EthernetPage DES-3010F Front Panel Front-Panel Components and LED IndicatorsLED or Button Power Console Link/Act Speed Description DES-3026 LED indicatorsRear Panel Description Rear panels of these switches contain an AC power connectorSide Panel Description Package Contents InstallationBefore You Connect to the Network Power On Installing the Switch without the RackInstalling the Switch in a Rack Mounting the Switch in a Standard 19 RackDEM-301T Optional Module Optional ModulesOptional Module Slots Upgraded DES-3018 / DES-3026 are now ready for useSwitch to End Node Connecting the SwitchSwitch connected to switch using fiber-optic cabling Switch to Hub or SwitchUplink Connection to a server, PC or switch stack Web-based Management Interface Introduction to Switch ManagementCommand Line Console Interface through the Serial Port Management OptionsTo connect a terminal to the console port Initial screen, first time connecting to the Switch First Time Connecting to the SwitchSnmp Settings Password ProtectionMIBs TrapsIP Address Assignment Show switch commandAssigning the Switch an IP Address Connecting Devices to the SwitchIntroduction Introduction to Web-based Switch ConfigurationLogging on to the Web Manager Areas of the User Interface Web-based User InterfaceArea Function AreaArea Web Pages Administration Device Information screen Device InformationParameter Description IP AddressClick Apply to implement changes made Setting the Switchs IP Address using the Console Interface Port Settings Port ConfigurationSpeed/Duplex Following parameters can be configuredClick Apply to implement the new settings on the Switch Parameter Description StatePort Description Port Description Setting and Port Description TableConnection Port Error DisabledFollowing information can be viewed in the preceding window PortUser Accounts window User AccountsManagement Admin User Admin and User PrivilegesUser Account Management Cable Diagnostics Password Encryption12. Port Mirroring window Port MirroringNumerical Facility Code System Log SettingsFollowing parameters can be set Parameter Description Index1-4 Host IP Severity FacilityUDP Port 514 or Status Time Settings Set Current Time Year Month Day Sntp SettingsTime Settings ParameterDescription Time Settings Current Time Time SourceClick Apply to implement your changes Time Zone and DSTTime in HH MM SS DST Annual Settings DST Repeating SettingsGlobal Settings MAC Notification SettingsFollowing parameters may be viewed and modified Ping Test Tftp ServicesTest Snmp Manager Snmp SettingsMIBs ParameterDescription User Name Snmp Trap SettingsSnmp User Table Following parameters are displayedGroup Name Snmp Version Auth-Protocol Priv-Protocol Following parameters can setSubtree OID Snmp View TableSnmp View Table ParameterDescription View NameManager Snmp Group Table Snmp Group TableView Type 28. Snmp Group Table Configuration Add window Snmp Community Table ParameterDescription Community Name View Name Access RightSnmp Host Table Use the Snmp Host Table to set up Snmp trap recipientsSnmp Engine ID 31. Snmp Engine ID Configuration windowIP-MAC-Port Binding Impb IP-MAC-Port Binding Impb32. IP-MAC Binding Ports window IP-MAC Binding Table33. IP-MAC Binding Table menu IP-MAC Binding Blocked IP-MAC Binding BlockedSingle IP Management SIM Overview Link Single IP ManagementSingle IP Settings SIM Settings SIM Using the Web InterfaceHoldtime TopologyParameterDescription Device Name Local Port Icon Description Speed Remote Port MAC Address Model Name39. Device Information Utilizing the Tool Tip Tool Tips40. Port Speed Utilizing the Tool Tip Group Icon Commander Switch IconFollowing options may appear for the user to configure Right Click44. Property window Member Switch Icon46. Property window Candidate Switch IconFive menus on the menu bar are as follows Menu BarThis window holds the following information Click Close to close the Property windowDevice Upload Log File Firmware UpgradeConfiguration File Backup/Restore IP Setting Upload Log File55. Upload Log File window ParameterDescription Forwarding & FilteringUnicast Forwarding Unicast ForwardingMulticast Forwarding Multicast MAC Address Port Settings59. Configure Multicast Filtering Mode Multicast Filtering ModeSmtp Service Smtp Server Settings ParameterDescription Subject Content Smtp ServiceDHCP/BOOTP Relay Global Settings DHCP/BOOTP RelayFollowing fields can be set Dhcp Relay Agent Information Option State Check Policy Click Apply to implement any changes that have been madeCircuit ID sub-option format DHCP/BOOTP Relay Interface SettingsImplementation of Dhcp Information Option 82 on the Switch Relay Interface SettingsParameterDescription Relay IP Address Mode Dhcp Relay Option 60 Default SettingsFollowing parameters may be configured or viewed Relay Option 60 Default SettingsFollowing parameters may be configured Dhcp Relay Option 60 SettingsParameterDescription String Server IP Match Type ParameterDescription Client ID Dhcp Relay Option 61 Default SettingsDhcp Relay Option 61 Settings Following parameters may be setRelay Rule Ieee 802.1Q VLANs L2 FeaturesVLANs Vlan DescriptionIeee 802.1Q Packet Forwarding 802.1Q Vlan TagsIngress Filtering Tagging and UntaggingVlan and Trunk Groups Default VLANsSwitch Ports Vlan Segmentation1Q Static VLANs window Static Vlan Entry1Q Static VLANs Modify Vlan Name Port Settings Tag None EgressUnderstanding Port Trunk Groups Link AggregationPage Parameter Description Vlan Trunk Status From…To Vlan Trunk SettingsTrunking Link Aggregation Link AggregationLacp Port Settings Lacp Port SettingsClick Apply to implement changes made 12. Current Igmp Snooping Group Entries Igmp SnoopingVlan ID Following parameters may be viewed or modifiedVlan Name Member Ports Static Router Ports SettingsParameterDescription From…To Status Igmp Access Control SettingsIgmp Snooping Igmp Access Control Settings Click Apply to implement the new settings802.1w Rstp 802.1D STP Forwarding Learning Spanning Tree802.1w Rapid Spanning Tree Port Transition States802.1D and 802.1w Compatibility STP Bridge Global SettingsEdge Port P2P PortSpanning Tree Protocol 17. STP Bridge Global Settings104 STP can be set up on a port per port basis STP Port SettingsEdge From/ToPriority MigrationParameterDescription Loopdetect Status Interval Following fields may be configuredLoopback Detection Loopback DetectionRecover Time From… To State CoS CoSIeee 802.1p Priority Advantages of CoS An Example of the Default CoS Mapping on the SwitchUnderstanding CoS Port Bandwidth Bandwidth Settings and Port Bandwidth Table windowParameterDescription From/To Type No Limit Rate 1p Default Priority and the 802.1p Default Priority window 802.1p Default PriorityParameterDescription Strict 802.1p User PriorityCoS Scheduling Mechanism Scheduling Mechanism has the following parametersClick Apply to let your changes take effect Weight fairParameterDescription Weights CoS Output SchedulingPriority Setting Priority SettingsConfigure the following Priority Setting parameters TOS Priority SettingsParameterDescription From/To MainSelect Dscp Priority Setting Dscp Priority Settings10. Port Mapping Priority CoS Port Mapping Priority Settings11. MAC Priority Setting MAC Priority SettingsInterface Filtering CPU Interface Filtering State CPU Interface Filtering State SettingsCPU Interface Filtering CPU Interface Filtering Table802.1p Profile IDSource MAC Destination MACSource IP Mask Destination IP Mask Ethernet typeProtocol Click Apply to set this entry in the Switch’s memoryParameter Description Profile ID Type Offset Shown below is the Packet Content Mask configuration windowCPU Interface Filtering Table Ethernet Parameters Description Access ID10. CPU Interface Filtering Rule Table IP Parameter Description Profile ID Mode Access ID Type12. CPU Interface Filtering Rule Display IP Vlan Name Source IP Destination IP DSCP0-63 PortParametersDescription Profile ID Mode Access ID Type Offset 15. CPU Interface Filtering Rule Display Packet Content Traffic Control SecurityTraffic Control Settings window Click Apply to implement the settings of each field 136 Port Security Port Security Settings and Table windowAdmin State Max. Addr0-10 Lock Address Mode Lock Entries Port Lock EntriesDelete 802.1X 802.1X Port-Based and MAC-Based Access ControlAuthenticator Authentication ServerClient Client802.1X Authentication Process Authentication Process10. Example of Typical Port-Based Configuration Port-Based Network Access Control11. Example of Typical MAC-Based Configuration MAC-Based Network Access Control12 .1X Authenticator Settings window 802.1X Authenticator SettingsThis screen allows you to set the following parameters ReAuthPeriod SuppTimeoutServerTimeout MaxReqLocal Users ParameterDescription From and To Capability 802.1X Capability SettingsSettings to view the following window Click Security 802.1X 802.1X CapabilityGuest VLANs Limitations Using the Guest VlanOperation Configure 802.1X Guest VlanPort List 18. Initialize Port window Initializing Ports for Port BasedInitializing Ports for MAC Based Reauthenticate Ports for Port BasedAuth State Reauthenticate Ports for MAC-basedPorts Parameter Description PortRadius Server To view the Trusted Host table, click Security Trusted Host Trusted Host24. Current Traffic Segmentation Table Traffic SegmentationSecure Shell SSH 25. Setup Forwarding Ports windowSSH Server Configuration Algorithm Settings SSH Authentication Mode and Algorithm SettingsFollowing algorithms may be set Data Integrity Algorithm Blow-fish CBCCast128-CBC Twofish128 Twofish192 Twofish256 Encryption Algorithm28. SSH User Authentication Mode window SSH User Authentication ModeUser may set the following parameters Auth. ModeParameter Description User Name CPU Utilization MonitoringPort Utilization window Port UtilizationParameterDescription Time Interval Record Number Received RX PacketsReceived RX Rx Packets Analysis Table Following fields may be set or viewedPackets UMB CastRX UMB Cast RX171 TransmittedTX Transmitted TXTx Packets Analysis window table for Bytes and Packets Rx Error Analysis window line graph Packet Errors10. Rx Error Analysis window table 11. Tx Error Analysis window line graph 12. Tx Error Analysis window table Packet Size Packet SizeFollowing fields can be set or viewed 15. Vlan Status window Vlan StatusParameterDescription Vlan Name MAC Address Port Find MAC AddressMAC Address Following fields can be viewed or setParameterDescription Sequence Time Log Text Switch LogParameterDescription Log Mode Time Interval Log SettingsMulticast Group MAC Address Reports Port Map Igmp Snooping GroupBrowse ARP Table Browse Router PortSession Table ParameterDescription Server Port Access ControlRadius Authentication Radius Authentication187 Accounting Radius AccountingBadAuthenticators UnknownTypes PacketsDropped Auth DiagnosticsSuccessAuthenticating EntersConnectingEapLogOffsConnecting EntersAuthenticatingResponsesFromSupplicant AuthSuccesses AuthFails Auth Session StatisticsAuth Statistics 27. Authenticator Statistics window Rx Invalid Rx Error Last Version Last Source Auth State Monitoring Port Access Control Auth State29. Authenticator State window MAC-Based 30. Factory Reset to Default Value window ResetFollowing menu is used to restart the Switch Reboot SystemSave Changes Logout 33. Reboot System windowPhysical and Environmental Appendix aCSMA/CD GeneralPerformance Appendix 1- 2. The standard RJ-45 pin assignments Appendix BSystem Log Entries Appendix C205 206 207 208 Cable Lengths Appendix DStandard Media Type Maximum Distance Glossary Page Warranties and Registration Limited WarrantyWhat Is Not Covered Trademarks FCC WarningCopyright Statement Page Page Product Registration Technical Support Tech SupportTechnical Support Technische Unterstützung Assistance technique Asistencia Técnica Supporto tecnico Technical Support Pomoc techniczna Technická podpora Technikai Támogatás Teknisk Support Teknisk Support Teknistä tukea asiakkaille Suomessa Teknisk Support Suporte Técnico Τεχνική Υποστήριξη Tehnička podrška Tehnična podpora Suport tehnica Technical Support Technical Support Техническая поддержка Asistencia Técnica Suporte Técnico Link友訊科技台灣分公司技術支援資訊 Dukungan Teknis 技术支持 Germany Spain Egypt International OfficesAll Countries and Regions excluding USA Registration Card247