Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 531 / 943

Configuration Guide 802.1x Configuration
If you configure guest vlan on the port, it will check whether the port is added to guest vlan when the port
state is switched from linkdown to linkup.
Shielding Proxy Server and Dial-up
The two major potential threats to network security are: The user sets its own proxy server and the user makes dial-up to
access the network after authentication. Star switches provide the function to shield proxy servers and dial-up
connections.
To implement this function needs no settings on the device end and needs only the corresponding attributes configured on
the Radius server end. Since the Radius has no standard attributes to indicate the maximum data rate, we can transfer
the authorization information only through the manufacturer custom attributes. For the general format defined, see the
Authorization section.
The proxy server shielding function defines the Vendor type of 0x20, and the dial-up shielding function defines the Vendor
type of 0x21.
The Attribute-Specific field is a 4-byte manufacturer defined attribute, which defines the actions taken against proxy server
access and dial-up access. 0x0000 means normal connection, without shielding detection. 0x0001 means shielding
detection.
To shield the access via the proxy server, you should fill in the following information:
Figure 0-6
To shield the access via the dial-up connection, you should fill in the following information: