xStack
®
DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch
Guest VLAN Name
Select the method of identification, Guest VLAN name, before entering the name of
the Guest VLAN being used for this function.
Guest VLAN ID
Select the method of identification, Guest VLAN ID, before entering the ID of the
Guest VLAN being used for this function.
Guest VLAN Member Ports
Enter the list of ports that you wish to configure for the Guest VLAN.
Max User (1-4000)
Enter the number of maximum users from
1
to
4000
. The default value is
1024
.
MAC-based Access Control Authorization Network Settings
RADIUS Authorization
Enable or disable RADIUS authorization.
Local Authorization
Enable or disable local authorization.
MAC-based Access Control Port Settings
Unit
Enter the unit to configure.
From/To
Enter the Port range.
State
Use the pull-down menu to enable or disable the MAC-based Access Control function
on individual ports.
Mode
Port-based
: In this mode, if one of the attached hosts is successfully authorized, all
hosts on the same port will be granted access to the network. If the port authorization
fails, this port will continue authenticating.
Host-based
: In this mode, every user can individually authenticate and access the
network.
Max User (1-4000)
Enter the number of maximum users from
1
to
4000
. Alternatively, tick the No Limit
check box.
Aging Time (1-1440 min)
A time period (configurable per port) between 1-1440 minutes, during which an
authenticated host will stay in an authenticated state. When the aging time has
expired, the host will be moved back to an unauthenticated state. Alternatively, tick
the Infinite check box.When aging time is set to infinite, it will disable the aging time.
Block Time (1-300 sec)
If a host fails to pass the authentication it will be blocked for a period of time referred
to as hold time (per port configurable). During this time, this host can't proceed to the
authenticating process (unless the user clears the database manually). As a result,
this hold mechanism can prevent the switch from frequent authentication which
consumes too much computing power. Alternatively, tick the Infinite check box.
Click
Apply
to implement settings.
MAC-based Access Control Local MAC Settings
The following window is used to set a list of MAC addresses, along with their corresponding target VLAN, which will be
authenticated for the Switch. Once a queried MAC address is matched in this table, it will be placed in the VLAN associated with
it here. The switch administrator may enter up to 1024 MAC addresses to be authenticated using the local method configured here.
To enable these settings, click
Security > MAC-based Access Control > MAC-based Access Control Local MAC Settings
, as
shown below:
392
