Dell PowerConnect 54 Series, User Manual

Page: 216 / 416

216
Configuring Device Information
Advanced Port Based Authentication also enables user based authentication. Specific VLANs in the device
are always available, even if specific ports attached to the VLAN are unauthorized. For example, Voice over
IP does not require authentication, while data traffic requires authentication. VLANs for which authorization
is not required can be defined. Unauthenticated VLANs are available to users, even if the ports attached to
the VLAN are defined as authorized.
Advanced Port Based Authentication is implemented in the following modes:
• Single Host Mode — Enables only the authorized host to access the port.
• Multiple Host Mode — Enables multiple hosts to be attached to a single port. Only one host must be
authorized for all hosts to access the network. If the host authentication fails or an EAPOL-logoff message
is received, all attached clients are denied network access.
• Guest VLANs — Provides limited network access to unauthorized ports. If a port is denied network
access via port-based authorization, but the Guest VLAN is enabled, the port receives limited network
access. For example, a network administrator can use Guest VLANs to deny network access via port-
based authentication, but grant Internet access to unauthorized users.
Configuring Port Based Authentication
The Port Based Authentication page contains fields for configuring port based authentication and for
enabling Guest VLANs. To open the Port Based Authentication page, click Switch
→
Network Security
→
Port Based Authentication .