D-Link xStack DGS-3120 Series Reference Guide

xStack® DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch Web UI Reference Guide
362
The fields that can be configured are described below:
Parameter Description
Authorization Network State
Click the radio buttons to enable of disable the Authorization Network State.
Authentication Server
Failover
Click the radio buttons to configure the authentication server failover function.
Local. The switch will resort to using the local database to authenticate the
client. If the client fails on local authentication, the client is regarded as un-
authenticated, otherwise, it authenticated.
Permit. The client is always regarded as authenticated. If guest VLAN is
enabled, clients will stay on the guest VLAN, otherwise, they will stay on the
original VLAN.
Block (default setting). The client is always regarded as un-authenticated.
Unit
Select the unit you want to configure. (EI and SI Mode Only)
From Port / To Port
Use the drop-down menus to select a range of ports to be enabled as
compound authentication ports.
Authentication Methods The compound authentication method options include: None, Any (MAC,
802.1X, JWAC or WAC), 802.1X+IMPB, IMPB+JWAC, IMPB+WAC,
MAC+IMPB, and MAC+JWAC. (RI and EI Mode Only)
None - all compound authentication methods are disabled.
Any (MAC, 802.1X, JWAC or WAC) - if any of the authentication methods
pass, then access will be granted. In this mode, MAC, 802.1X, JWAC and
WAC can be enabled on a port at the same time. In Any (MAC, 802.1X,
JWAC or WAC) mode, whether an individual security module is active on a
port depends on its system state.
802.1X+IMPB - 802.1X will be verified first, and then IMPB will be verified.
Both authentication methods need to be passed.
IMPB+JWAC - JWAC will be verified first, and then IMPB will be verified. Both
authentication methods need to be passed.
IMPB+WAC - WAC will be verified first, and then IMPB will be verified. Both
authentication methods need to be passed.
MAC+IMPB - MAC will be verified first, and then IMPB will be verified. Both
authentication methods need to be passed.
MAC+JWAC - MAC will be verified first, and then JWAC will be verified. Both
authentication methods need to be passed.
Authorized Mode Toggle between Host-based and Port-based. When Port-based is selected, if
one of the attached hosts passes the authentication, all hosts on the same
port will be granted access to the network. If the user fails the authorization,
this port will keep trying the next authentication method. When Host-based is
selected, users are authenticated individually.
VID List
Enter a list of VLAN ID.
State
Use the drop-down menu to assign or remove the specified VID list as
authentication VLAN(s).
Click the Apply button to accept the changes made for each individual section.
Compound Authentication Guest VLAN Settings (RI and EI
Mode Only)
Users can assign ports to or remove ports from a guest VLAN.
To view this window, click Security > Compound Authentication > Compound Authentication Guest VLAN
Settings as shown below:

D-Link xStack DGS-3120 Series Specifications

General

Brand	D-Link
Model	xStack DGS-3120 Series
Category	Switch
Language	English