NETGEAR FSM726 - ProSafe Managed Switch, Руководство по установке

Страница: 35 / 156

700 Series Software Manual v2.1
Administration Console Telnet Interface 4-17
Figure 4-20: Port-Based Authentication
802.1x port-based authentication provides RADIUS client authentication and data encryption
features (see
Appendix C, “802.1x Port-Based Authentication Overview” ). If you have a RADIUS
server on your network, you can have authentication of port access done through the RADIUS
server. This does affect traffic passing through the switch, which can be helpful is securing your
network from wireless eavesdropping when a wireless access point is connected to the switch. To
enable 802.1x, provide the IP address of the RADIUS server, and the shared secret authentication
key. The re-authentication timer determines how frequently the session will refresh the data
encryption with a new key.
Main Menu> Advanced > Trusted MAC Address Table
This page shows all of the trusted MAC addresses you can set to allow the switch to forward traffic
from. The maximum number of trusted MAC addresses is 128 per port and 1024 per system. Any
traffic from MAC addresses that are not included in the trusted MAC address table will be
dropped. There are three functions, which allow you to Add, Delete, or Query entries from the
Trusted MAC Address Table.
Main Menu > Advanced > MAC Address Lockdown Table
This page shows all of the locked down MAC addresses that the switch has learned. To use the
lockdown feature, you have to enable it first. After triggering the lockdown function, the
maximum number of MAC addresses that a system can learn is 1024. As it reaches the maximun
number of MAC addresses (either per port or per system), the switch will lock down address
learning for that saturated port or the whole system. If an individual port has locked down, it will
not accept any new MAC addresses until you remove some MAC addresses from the table.