D-Link DES-3028, Руководство пользователя

Страница: 119 / 333

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
IGMP Authentication
IGMP Access Authentication provides a client-server authentication protocol for specified ports on the Switch. This function will
secure access to an IP multicast group by using a user authentication process that will insure there is more control over the access
to multicast traffic. Only the host/port that passes the authentication process can successfully join the multicast group and receive
multicast data.
When a host sends a join message for the interested multicast group, the switch has to authenticate the request first before learning
the multicast group/port. To do this the switch sends an access-request to the authentication server for information about the host
MAC address, switch port number, the switch IP and the multicast group IP. When an access-accept request is answered from the
authentication server the switch learns the multicast group. If an access-reject request is answered from the authentication server,
the switch will not learn the multicast group/port and will not process the packet any further. The entry will then be put on the
authentication failed list. If there is no answer from the authentication server after a specific period of time the switch will resend
the access-request to the server. If the switch doesn’t receive any response after a specific number of times, the request is denied
and the entry is entered into the authentication failed list. When the multicast group/port is already learned by the switch, it will
not do the authentication again.
NOTE:
Attribute name Type Description
User-Name string MAC-address of the computer, which will send the IGMP-
report/IGMP-leave packet.
User-Password string The password of the user to be authenticated.
NAS-Port integer The switch port number.
NAS-IP-Address string The switch IP-address.
Framed-IP-Address string The multicast group IP, that makes the join/leave attempt.
1. In RFC2865, the attribute Framed-IP-Address indicates that the NAS should use that value as the
user’s IP address. In this function, we use that value as the multicast group IP address.
2. The attribute User-Name indicates the host’s MAC-address in the format 000102030405.
3. The attribute User-Password indicates the password to be authenticated. The vaule is the same as
User-Name by default
This function allows the user to select a range of ports that will be included in the forwarding task and enable or disable their state.
To view this window click
L2 Features
>
IGMP Snooping > IGMP Access Control
.
105