D-Link DES-3028, Руководство пользователя

Страница: 216 / 333

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
802.1X Host-based Access Control
RADIUS
Server
Ethernet Switch
802.1X
Client
Network access controlled port
Network access uncontrolled port
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
…
802.1X
Client
Figure 10- 21. Example of Typical Host-Based Configuration
In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one
for each attached device that required access to the LAN. The Switch would regard the single physical Port connecting it to the
shared media segment as consisting of a number of distinct logical Ports, each logical Port being independently controlled from
the point of view of EAPOL exchanges and authorization state. The Switch learns each attached devices’ individual MAC
addresses, and effectively creates a logical Port that the attached device can then use to communicate with the LAN via the Switch.
NOTE: To enable Host-based 802.1X, select the
MAC-based
option in the
Switch 802.1X field in the Device Information window.
RADIUS Attributes Assignment
To assign Ingress/Egress bandwidth by RADIUS server, the proper parameters should be configured on the RADIUS Server. The
tables below show the parameters for bandwidth and default priority:
The parameters of the Vendor-Specific attribute are:
Vendor-Specific attribute Description Value Usage
Vendor-ID Defines the vendor 171 (DLINK) Required
Vendor-Type The definition of this
attribute 2 (for ingress bandwidth)
3 (for egress bandwidth)
Required
202