Intellinet 523868, User Manual

Page: 34 / 56

2.2.9.2 Filter Attach
A filter set is idle if you
did not attach it to any
ingress port. Use this
screen to attach a filter
set to ingress ports.
Click “Attach All” to apply
the filter set to all the
ports of the system.
Click “Detach All” to remove all the filters from the attached ports.
Click “Submit” to commit the settings. Click “Refresh” to display current switch settings. To
eventually make all changes permanent in Flash memory, click on “Save Configuration” (listed
at the bottom of the Configuration Menu) and click “Save.”
NOTE: You may not detach certain ports after issuing an “Attach All” command. If you wish to
detach ports, use the “detach All” command.
NOTE: Once the filter set is attached to the ingress ports, it will filter the packets according to
the ingress port and the packet fields in the rules (e.g., a set with a single rule to filter out the
destination MAC address 00:10:20:30:40:50 is attached to Ingress Port 3, but a packet with the
destination MAC 00:10:20:30:40:50 from Port 3 is not permitted).
2.2.10 security
The switch supports the 802.1x port-based security feature. Only authorized hosts are allowed to
access the switch port. Traffic from unauthenticated hosts will be blocked. Authentication can be
provided via a RAdIUS server or the local database in the switch. The switch also supports
dynamic VLAN assignment through the 802.1x authentication process. NOTE: The VlAN
information for the users/ports should be configured in the authentication server before enabling
this feature.
2.2.10.1 Port Access
Control
This screen — split into
Bridge (Global) Setting
and Port Setting — is
used to configure various
parameters of 802.1x,
which uses either a
RAdIUS server or a
local database to
authenticate port users.
System-Auth-Control:
Select to enable the
authentication.
Authentication Method:
“RAdIUS” or “local
database” can be
selected to authenticate
the port user.
Port: Highlight a port to
configure from the port list window at the bottom of the screen.
Multi-host: If enabled, all hosts connected to the selected port are allowed to use the port if one
of the hosts passed the authentication. If disabled, only one host is allowed to use the port.
Authentication Control: If “Force Authorized” is selected, the selected port is force-authorized;
34
WEb MANAgEMENT