D-Link DXS-3250 - xStack Switch - Stackable, Web/Installation Manual

Page: 94 / 311

Configuring Device Security
Configuring Network Security
Page 94
Advanced port-based authentication is implemented in the following modes:
•
Single Host Mode — Allows port access only to the authorized host.
•
Multiple Host Mode — Multiple hosts can be attached to a single port. Only one host must be authorized for
all hosts to access the network. If the host authentication fails, or an EAPOL-logoff message is received, all
attached clients are denied access to the network.
•
Guest VLANs — Provides limited network access to authorized ports. If a port is denied network access via
port-based authorization, but the Guest VLAN is enabled, the port receives limited network access. For exam-
ple, a network administrator can use Guest VLANs to deny network access via port-based authentication, but
grant Internet access to unauthorized users.
•
Unauthenticated VLANS — Are available to users, even if the ports attached to the VLAN are defined as
unauthorized.