D-Link DES-3528 - xStack Switch - Stackable, User Manual, Page: 219 / 322

xStack
®
DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
218
Virtual IP
This parameter specifies the JWAC Virtual IP address that is used to accept authentication
requests from an unauthenticated host. Only requests sent to this IP will get a correct
response.
NOTE:
This IP does not respond to ARP requests or ICMP packets.
Port Number
(1-65535)
This parameter specifies the TCP port that the JWAC Switch listens to and uses to finish the
authentication process.
UDP Filtering
This parameter enables or disables JWAC UDP Filtering. When UDP Filtering is Enabled , all
UDP and ICMP packets except DHCP and DNS packets from unauthenticated hosts will be
dropped
Forcible Logout
This parameter enables or disables JWAC Forcible Logout. When Forcible Logout is
Enabled , a Ping packet from an authenticated host to the JWAC Switch with TTL=1 will be
regarded as a logout request, and the host will move back to the unauthenticated state.
Authentication
Protocol
This parameter specifies the RADIUS protocol used by JWAC to complete a RADIUS
authentication. The options include
Local , EAP MD5 , PAP , CHAP , MS CHAP , and MS
CHAPv2 .
Redirect State
This parameter enables or disables JWAC Redirect. When the redirect quarantine server is
enabled, the unauthenticated host will be redirected to the quarantine server when it tries to
access a random URL. When the redirect JWAC login page is enabled, the unauthenticated
host will be redirected to the JWAC login page in the Switch to finish authentication. When
redirect is disabled, only access to the quarantine server and the JWAC login page from the
unauthenticated host are allowed, all other web access will be denied.
NOTE:
When enabling redirect to the quarantine server, a quarantine
server must be configured first.
Redirect Destination
This parameter specifies the destination before an unauthenticated host is redirected to either
the
Quarantine Server or the JWAC Login Page .
Redirect Delay Time
(0-10)
This parameter specifies the Delay Time before an unauthenticated host is redirected to the
Quarantine Server or JWAC Login Page. Enter a value between
0 and 10 seconds. A value
of 0 indicates no delay in the redirect.
RADIUS
Authorization
Specifies to Enable or Disable RADIUS Authorization.
Local Authorization
Specifies to Enable or Disable Loacl Authorization.
Authentication
Failover
Specifies to Enable or Disable the Authen JWAC Failover. When the Authentication Failover
is disabled, the authentication will fail if the RADIUS servers are unreachable. When the
Authentication Failover is enabled, the local database will be used to do the authentication if
the RADIUS server authentication is unreachable. By default, the state is
Disabled .
Quarantine Server Configuration
Error Timeout
(5-300)
This parameter is used to set the Quarantine Server Error Timeout. When the Quarantine
Server Monitor is enabled, the JWAC Switch will periodically check if the Quarantine works
okay. If the Switch does not receive any response from the Quarantine Server during the
configured Error Timeout, the Switch then regards it as not working properly. Enter a value
between
5 and 300 seconds.
Monitor
This parameter enables or disables the JWAC Quarantine Server Monitor. When Enabled ,