Digisol DG-FS4528P, Руководство по управлению

Страница: 201 / 973

C
HAPTER
7 | Security Measures
Network Access (MAC Address Authentication)
– 201 –
2.
Select a port from the Port scroll-down list, and click Query.
3. Select the IP address for a host from the Host IP scroll-down list.
4.
Click Re-authenticate.
Figure 80: Re-authenticating a Web-Authenticated Host
N
ETWORK
A
CCESS
(MAC A
DDRESS
A
UTHENTICATION
)
Some devices connected to switch ports may not be able to support 802.1X
authentication due to hardware or software limitations. This is often true
for devices such as network printers, IP phones, and some wireless access
points. The switch enables network access from these devices to be
controlled by authenticating device MAC addresses with a central RADIUS
server.
N
OTE
:
RADIUS authentication must be activated and configured properly
for the MAC Address authentication feature to work properly. (See
“ Configuring Local/Remote Logon Authentication .”)
N
OTE
:
MAC authentication cannot be configured on trunk ports.
CLI R
EFERENCES
"Network Access (MAC Address Authentication)" on page 605
C
OMMAND
U
SAGE
MAC address authentication controls access to the network by
authenticating the MAC address of each host that attempts to connect
to a switch port. Traffic received from a specific MAC address is
forwarded by the switch only if the source MAC address is successfully
authenticated by a central RADIUS server. While authentication for a
MAC address is in progress, all traffic is blocked until authentication is
completed. On successful authentication, the RADIUS server may
optionally assign VLAN and quality of service settings for the switch
port.