D-Link DES-3326SR, Руководство пользователя

Страница: 87 / 240

D-Link DES-3326SR Layer 3 Switch
Chapter 14
Security Management
Access Profile Configuration
CPU Interface Filtering
802.1X Port-based Network Access Control
802.1X Configuration
Various security mechanisms are available with the DES-3326S including those discussed in this chapter. Other
techniques are used to improve the security environment that are not included in this chapter but are discussed in
other chapters. This chapter is dedicated to setting up Access Profiles and 802.1X configuration.
Access Profile Configuration
Access profiles allow you to establish criteria to determine if the Switch will forward packets based on the
information contained in each packet’s header. These criteria can be specified on a basis of VLAN, MAC
address or IP address. First, create the Access Profile Mask, then, define the rules used to allow access.
Access Profile Mask
Creating an access profile is divided into two basic parts. The first is to specify which part or parts of a frame
the switch will examine, such as the MAC source address or the IP destination address. The second part is
entering the criteria the switch will use to determine what to do with the frame. The entire process is described
below in two parts.
Figure 14- 1. Access Profile Mask Setting Table
To create an Access Profile Mask:
Click the New button in the Access Profile Mask Setting summary table page. A new menu is displayed. Use this
to create an access profile and specify what criteria are used to examine frames. Once the profile has been
created you can set up the rule applied to the profile as described later in this section.
77