Manuals / D-Link / Computer Equipment / Switch

D-Link DES-3226 manual 802.1X Port-based Network Access Control

Models: DES-3226

1 179

Download 179 pages 59.28 Kb

Page 44

DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide

Before loading TCP/IP with an address acquired from the DHCP server, DHCP clients check for an IP address conflict by sending an Address Resolution Protocol (ARP) request containing the address. If a conflict is found, TCP/IP does not start, and the user receives an error message. The conflicting address should be removed for the list of active leases or it should be excluded until the conflict is identified and resolved.

802.1X Port-based Network Access Control

The Switch is an implementation of the server side of IEEE 802.1X-Port Based Network Access Control. Through this mechanism, users have to be authorized before being able to access the network. See the following figure:

Figure 5-9. Typical 802.1X Configuration Prior to User Authentication

Once the user is authenticated, the switch unblocks the port that is connected to the user as shown in the next figure.

34

Image 44

D-Link DES-3226 manual 802.1X Port-based Network Access Control, Typical 802.1X Configuration Prior to User Authentication

Contents

Recyclable Wichtige Sicherheitshinweise Hardware TrademarksCopyright Statement CE Mark Warning Link Offices for Registration and Warranty ServiceFCC Warning Vcci Warning Bsmi Warning AttenzionePage Table of Contents Dhcp ViiiPage Page About this Guide Overview of this User’s GuideFeatures Performance FeaturesIntroduction PortsManagement DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Unpacking and Setup InstallationDesktop or Shelf Installation UnpackingRack Installation Installing rubber feet for desktop installationPower on Power FailureRear Panel Identifying External ComponentsFront Panel Side Panels Optional 100BASE and 1000BASE Extension Modules100BASE-FX Module 2Km 100BASE-FL Module 15Km1000BASE-LX Gigabit Module Optional 1000BASE-LX 2-port front panel module1000BASE-SX Gigabit Module 1000BASE-T Copper Gigabit ModuleLED Indicators 1000BASE Gbic ModuleSwitch to Hub or Switch Connecting the SwitchSwitch to End Node DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Local Console Management Switch Management and Operating ConceptsDiagnostic console port RS-232 DCE Boot Procedure screen IP Addresses and Snmp Community NamesTraps Snmp performs the following functions AuthenticationMIBs Some filtering is done automatically by the Switch Packet ForwardingFiltering MAC Address Aging TimeSpanning Tree Protocol STP Operation LevelsVariable Description Default Value Bridge Protocol Data UnitsCreating a Stable STP Topology STP Port StatesDefault Spanning-Tree Configuration Feature Default Value Port transitions from one state to another as followsUser-Changeable STP Parameters Illustration of STPBefore Applying the STA Rules Some relevant terms VLANsIeee 802.1Q VLANs 802.1Q Vlan Packet Forwarding 802.1Q Vlan Tags Ieee 802.1Q Packet ForwardingPort Vlan ID Ieee 802.1Q TagTagging and Untagging Ingress FilteringVLANs VIDDhcp 802.1X Port-based Network Access Control Typical 802.1X Configuration Prior to User Authentication10. Typical 802.1X Configuration with User Authentication 11. Typical Configuration with 802.1X Fully Implemented Before You Start Configuring the Switch Using the Console InterfaceConnecting to the Switch First Time Connecting to The Switch Console Usage ConventionsUser Accounts Management Main menuSwitch Configuration Privilege Management Root User+ Root, User+ and Normal User PrivilegesSave Changes User Accounts ManagementFactory Reset Highlight Reboot from the main menu and press EnterLogging Onto The Switch Console Updating or Deleting User AccountsViewing Current User Accounts Deleting a User AccountConfiguration Configure IP Address11. Remote Management Setup screen Configure Switch Information and Advanced Settings Configure Advanced Switch Features13. Configure Advanced Switch Features screen Configure Ports 14. Configure Ports screenConfigure Bandwidth 15. Bandwidth Configuration menuConfigure Spanning Tree Protocol 17. Setup Egress Bandwidth screenPort Spanning Tree Settings 19. Port Spanning Tree Settings screenConfigure Static Destination-Address Filtering Table Setup Unicast Filtering TableSetup Static Multicast Filtering Table 21. Setup Unicast Filtering Table screenConfigure VLANs To create a new 802.1Q Vlan802.1Q Static Vlan Settings To set the 802.1Q Vlan membership status of a portExample of 802.1Q Vlan Port Vlan assignmentTo set a port as either a Tagged or an Untagged port Ingress Filter Settings 26. Port Vlan assignment screenConfigure Igmp Snooping Port Gvrp Settings29. Igmp Snooping Settings screen To configure Igmp SnoopingConfigure Port Lacp Trunking 30. Port Lacp Trunking Settings screenConfigure Port Mirroring Group Name Enter a name for the port trunking groupConfigure Threshold of Broadcast/Multicast/DA-Unknown Storm Configure Port SecurityClass of Service Configuration 35. Class of Service Configuration screenDefault Port Priority assignment Class of Traffic ConfigurationConfigure Port Gmrp Settings Configure Diffserv SettingsConfigure Port Access Entity PAE System Configuration41. PAE System Configuration menu 43. Initialize Ports screen Configure 802.1X Authenticator Configuration 44. Reauthenticate Portss menu45. Configure 802.1X Authenticator Configuration screen Configure Radius Server 46. Configure Radius Server menu48. Configure Authentic Radius Server screen Network Monitoring Port UtilizationPort Error Packets Port Packet AnalysisBrowse MAC Address To search for a particular MAC addressSwitch History Igmp SnoopingDynamic Group Registration Table Vlan StatusPort Access Control Statistics 59. Monitor Authentication Statistics screen61. Show Authenticator Statistics screen 62. Show Authenticator Session-Counters screen Snmp Manager Configuration 64. Show Radius Accounting screen65. Snmp Manager Configuration screen Upgrade Firmware from Tftp Server System UtilitiesUse Configuration File on Tftp Server Save Settings to Tftp ServerSave History Log to Tftp Server Ping TestReboot 71. Ping screen73. System Reboot confirmation screen Getting Started WEB-BASED Network ManagementIntroduction DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide TCP/IP Parameters Setup window IP AddressSwitch Information Switch Information Basic Settings windowAdvanced Settings Switch Information Advanced Settings windowDES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Port Configuration Port Configuration windowPort Mirroring Port Mirroring windowPort Lacp Trunking Settings window Port Lacp TrunkingIgmp Snooping Settings window DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Port Gmrp 100Diffserv Settings 101102 STP Switch SettingsSpanning Tree STP Port Settings 103104 Static Filtering TableUnicast Filtering 105 Multicast FilteringStatic Vlan Entry 15 .1Q Static Vlan Setup window 106Port Vlan ID Pvid 107108 Port BandwidthIngress Bandwidth 109 Threshold of BroadcastEgress Bandwidth Port Priority 110111 Class of ServiceClass of Traffic 112 Port SecurityPAE System Control Configure Authenticator 113114 Port Authenticating Settings 115116 Reauthenticate PortssInitialize Portss 117 Radius ServerGeneral Radius Server Authentic Radius Server 118Management Security IPLocal User 119120 Snmp ManagerTrap Manager User Accounts User Account ManagementUser Account Modify Table 121Monitoring 122123 PacketsReceived RX 38. Rx Packets Analysis window Table 124UMB-cast RX 125Transmitted TX 126Errors 12743. Rx Error Analysis window Line Chart 128129 45. Tx Error Analysis window Line Chart 130Size 131Packet Size 132MAC Address 13349. MAC Address Table window 134Dynamic Group Registration 135Port Access Control 136Authenticator State 137Authenticator Statistics 138Authenticator Session-Counter 139Radius Authentication 140Maintenance Tftp ServicesRadius Accounting 141142 Update FirmwareConfiguration File 143 Save SettingsSave History Log 62. Switch History window 144Save Changes 145Restart System 146Connection Timeout HelpLogout 147Technical Specifications 148Physical and Environmental 149RJ-45 PIN Specification 150RJ-45 Connector pin assignment 151Runtime Switching Software Default Settings 152Understanding Troubleshooting the Spanning Tree Protocol Blocking StatePort in the blocking state does the following 153154 Listening StatePort in the listening state does the following 155 Learning StatePort in the learning state does the following Disabled State Forwarding StatePort in the forwarding state does the following 156Disabled port does the following 157Troubleshooting STP Spanning Tree Protocol FailureFull/Half Duplex Mismatch 158Unidirectional Link 159Resource Errors Know where the root is locatedPacket Corruption Identifying a Data Loop161 Know which links are redundantMinimize the number of ports in the blocking state 162 Brief Review of Bitwise Logical Operations 163Index 164NV-RAM 165Offices Netherlands Link Benelux Registration Card