Port Access Control
D-Link
Unified Wired and Wireless Access System
Oct. 2015
Page 420
D-Link UWS User Manual
Port Access Control
In port-based authentication mode, when 802.1X is enabled globally and on the port, successful
authentication of any one supplicant attached to the port results in all users being able to use the port without
restrictions. At any given time, only one supplicant is allowed to attempt authentication on a port in this mode.
Ports in this mode are under bidirectional control. This is the default authentication mode.
The 802.1X network has three components:
•
Authenticators:
Specifies the port that is authenticated before permitting system access.
•
Supplicants:
Specifies host connected to the authenticated port requesting access to the system services.
•
Authentication Server:
Specifies the external server, for example, the RADIUS server that performs the
authentication on behalf of the authenticator, and indicates whether the user is authorized to access
system services.
Global Port Access Control Configuration
Use the Port Based Access Control Configuration page
to enable or disable port access control on the system.
To display the Port Based Authentication page, click
LAN > Security > Port Access Control > Configuration
in
the navigation menu.
Figure 291: Global Port Access Control Configuration
Table 247: Global Port Access Control Configuration Fields
Field
Description
Administrative Mode
Select
Enable
or
Disable
802.1x mode on the switch. The default is Disable.
This feature permits port-based authentication on the switch.
VLAN Assignment Mode
If enabled, when a supplicant is authenticated by a authentication server, the
port that the supplicant is connected to is placed in a particular VLAN specified
by the RADIUS server. VLAN Assignment mode controls if the switch is allowed
to place a port in a RADIUS-assigned VLAN. A port’s VLAN assignment is
determined by the first supplicant that is authenticated on the port.
Summary of Contents for DWL-8600AP
Page 754: ......