Allied Telesis AT-S79 - Chapter 17 802.1 x Port-based Network Access Control

To Next Page

To Previous Page

Section I: Using the Menus Interface 191

Chapter 17

802.1x Port-based Network Access

Control

This chapter contains information about and the procedure for configuring

the 802.1x Port-based Network Access Control feature. This chapter

includes the following sections:

 “802.1x Port-based Network Access Control Overview” on page 192

 “Guest VLANs” on page 198

 “Configuring 802.1x Port-based Network Access Control” on page 199

 “Configuring MAC Based Access Control” on page 203

Main Page

Default Chapter3
- Table of Contents3
Preface13
- Where to Find Web-Based Guides14
- Document Conventions15
- Contacting Allied Telesis16
Chapter 1: Overview17
- Management Overview18
- Local Management Connection19
- Remote Management Connection20
- Remote SNMP Management21
- Management Access Level22
- Ports 15 and 16 on the AT-GS950/16 Switch and Ports 23 and 24 on the AT-GS950/24 Switch23
Section I: Using the Menus Interface25
Chapter 2: Getting Started with the Menus Interface27
- Starting a Local Management Session28
- Figure 1. Connecting the Management Cable to the Console Port28
- Figure 2. Login Menu29
- Figure 3. Main Menu29
- Using the Menus Interface30
- Table 1. Menus Interface Operations30
- Quitting from a Local Management Session31
Chapter 3: Basic Switch Parameters33
- Configuring the IP Address, Subnet Mask, and Gateway Address34
- Figure 4. Basic Switch Configuration Menu34
- Figure 5. System IP Configuration Menu35
- Enabling and Disabling the DHCP Client37
- Configuring System Administration Information38
- Figure 6. System Administration Configuration Menu38
- Setting the User Interface Configuration40
- Figure 7. User Interface Configuration Menu41
- Viewing Switch Information45
- Figure 8. General Information Menu45
- Rebooting the Switch48
- Figure 9. Switch Tools Configuration Menu48
- Figure 10. System Reboot Menu49
- Pinging a Remote System50
- Figure 11. Ping Execution Menu50
- Figure 12. Ping Results52
- Returning the AT-S79 Management Software to the Factory Default Values53
- Displaying Statistics55
  - Displaying Port Statistics55
  - Figure 13. Statistics Menu55
Chapter 4: Port Configuration59
- Displaying the Port Parameters60
- Figure 14. Port Configuration Menu60
- Enabling and Disabling a Port63
- Setting a Port's Speed and Duplex Mode64
- Changing the Flow Control Setting66
Chapter 5: Port Trunking67
- Port Trunking Overview68
  - Static Port Trunk Overview68
  - Figure 15. Static Port Trunk Example68
- Creating a Port Trunk70
- Figure 16. Advanced Switch Configuration Menu70
- Figure 17. Trunk Configuration Menu71
- Modifying a Port Trunk73
- Enabling and Disabling a Port Trunk74
Chapter 6: IGMP Snooping75
- IGMP Snooping Overview76
- Configuring IGMP Snooping78
Chapter 7: Static Multicast Address83
- Static Multicast Address Overview84
- Creating a Static Multicast Address85
Chapter 8: Port Mirroring89
- Port Mirroring Overview90
- Configuring Port Mirroring91
- Figure 21. Port Mirroring Menu91
- Disabling Port Mirroring93
Chapter 9: Dial-In User Configuration95
- Dial-In User Configuration Overview96
- Configuring a Dial-In User97
Chapter 10: Virtual Lans101
- VLAN Overview102
- Port-Based VLAN Overview104
- Tagged VLAN Overview105
- Creating a VLAN107
- Figure 23. VLAN Management Menu107
- Figure 24. Tagged-Based VLAN Configuration Menu108
- Figure 25. VLAN Creation Menu109
- Configuring the PVID of Untagged Ports111
- Displaying the Vlans115
- Figure 27. Config VLAN Member Menu116
- Resetting a VLAN to the Default Value117
- Modifying a VLAN118
- Deleting a VLAN120
  - Deleting a Port-Based VLAN120
  - Deleting a Tagged VLAN121
Chapter 11: Simple Network Management Protocol (SNMP)123
- SNMP Overview124
- Community String Attributes125
- Default SNMP Community Strings127
- Creating an SNMP Community128
- Creating an SNMP Host133
- Enabling and Disabling SNMP Traps137
Chapter 12: Quality of Service (Qos)143
- Qos Overview144
- Table 2. Default Mappings of IEEE 802.1P Priority Levels to Egress Port Priority Queues145
- Mapping Cos Priorities to Egress Queues147
- Figure 33. Quality of Service Configuration Menu147
- Figure 34. Traffic Class Configuration Menu148
- Configuring Cos150
- Figure 35. Port Priority Configuration Menu151
Chapter 13: Rapid Spanning Tree Protocol (RSTP)155
- RSTP Overview156
- Enabling or Disabling RSTP163
- Figure 40. RSTP Configuration Menu163
- Configuring the RSTP Bridge Settings166
- Configuring STP Compatibility168
- Configuring RSTP Port Settings169
- Displaying the RSTP Topology174
- Figure 43. Topology Information Menu174
Chapter 14: Bandwidth Control177
- Bandwidth Control Overview178
- Configuring Bandwidth Control179
Chapter 15: IP Access List183
- IP Access List Overview184
- Configuring IP Access List185
Chapter 16: Destination MAC Filtering187
- Destination MAC Filtering Overview188
- Configuring Destination MAC Filtering189
Chapter 17: 802.1X Port-Based Network Access Control191
- 802.1X Port-Based Network Access Control Overview192
- Guest Vlans198
- Configuring 802.1X Port-Based Network Access Control199
- Figure 49. Port Based Access Control Configuration Menu199
- Configuring MAC Based Access Control203
- Figure 50. MAC Based Access Control Configuration Menu204
Chapter 18: RADIUS Authentication Protocol207
- RADIUS Overview208
  - RADIUS Implementation Guidelines208
- Configuring the RADIUS Client209
- Figure 51. RADIUS Server Configuration Menu209
- Displaying the RADIUS Client Settings211
Chapter 19: Management Software Updates213
- Downloading a New Management Software Image Using TFTP214
- Figure 52. Software Upgrade Menu (1 of 2)215
- Figure 53. Software Upgrade Menu (2 of 2)215
Section II: Using the Web Browser Interface217
Chapter 20: Starting a Web Browser Management Session219
- Establishing a Remote Connection to Use the Web Browser Interface220
- Figure 54. Entering a Switch's IP Address in the URL Field220
- Figure 55. AT-S79 Login Dialog Box221
- Figure 56. Switch Information Page for the AT-GS950/24 Switch221
- Figure 57. AT-S79 Management Software Front Panel222
- Web Browser Tools223
- Quitting a Web Browser Management Session224
Chapter 21: Basic Switch Parameters225
- Configuring an IP Address, Subnet Mask and Gateway Address226
- Figure 58. IP Setup Page226
- Setting up the IP Access List228
- Enabling and Disabling the DHCP Client230
- Configuring System Management Information231
- Figure 60. Management Page231
- Configuring System Administration Information233
- Setting the User Interface Configuration236
- Figure 63. User Interface Page236
- Viewing System Information238
- Figure 64. Switch Information Page238
- Rebooting a Switch241
- Figure 65. Reboot Page241
- Pinging a Remote System243
- Figure 66. Ping Page243
- Figure 67. Ping Test Results Page244
- Returning the AT-S79 Management Software to the Factory Default Values245
Chapter 22: Port Configuration247
- Viewing and Configuring Ports Using the Port Configuration Page248
- Figure 68. Physical Interface Page248
Chapter 23: Port Trunking251
- Creating a Port Trunk252
- Figure 69. Trunking Page252
- Modifying a Port Trunk254
- Enabling and Disabling a Port Trunk255
Chapter 24: Port Mirroring257
- Configuring Port Mirroring258
- Figure 70. Mirroring Page258
- Disabling Port Mirroring259
Chapter 25: Static Multicast Address Table261
- Configuring Static Multicast Address Table262
- Figure 71. Static Multicast Address Table Page262
- Figure 72. Static Multicast Table with Group MAC Addresses263
- Modifying a Static Multicast Address Table264
- Figure 73. Modify Static Multicast Address Table Page264
- Deleting a Group MAC Address265
Chapter 26: IGMP Snooping267
- Configuring IGMP Snooping268
- Figure 74. IGMP Snooping Page268
Chapter 27: Destination MAC Address Filter271
- Setting a Destination MAC Filter272
- Figure 75. Destination MAC Filter Page272
- Figure 76. Destination MAC Address with New Entries273
- Removing a MAC Address274
Chapter 28: Bandwidth Control275
- Configuring Bandwidth Control276
- Figure 77. Bandwidth Control Page276
Chapter 29: Virtual Lans279
- Assigning Ports to a VLAN280
- Figure 78. VLAN Mode Page280
- Creating a Tagged VLAN281
- Figure 79. Tagged VLAN Page281
- Figure 80. Example of Tagged VLAN Page282
- Modifying a Tagged VLAN283
- Figure 81. Modify VLAN Page283
- Deleting a Tagged VLAN284
- Creating a Port-Based VLAN285
- Figure 82. Port-Based VLAN Page285
- Modifying a Port-Based VLAN286
- Figure 83. Modify Port-Based VLAN286
- Deleting a Port-Based VLAN287
Chapter 30: Simple Network Management Protocol (SNMP)289
- Creating an SNMP Community290
- Figure 84. Community Table Page290
- Modifying an SNMP Community291
- Deleting an SNMP Community292
- Creating a Host Table293
- Figure 85. Host Table Page293
- Modifying a Host Table Entry294
- Deleting a Host Table Entry295
- Enabling or Disabling Traps296
- Figure 86. Trap Setting Page296
- Modifying Traps297
- Deleting Traps298
Chapter 31: Quality of Service (Qos)299
- Mapping Cos Priorities to Egress Queues300
- Figure 87. Cos Page300
- Configuring Cos302
- Figure 88. Port Priority Configuration Page303
Chapter 32: Rapid Spanning Tree Protocol (RSTP)305
- Basic RSTP Configuration306
- Figure 89. Rapid Spanning Tree Configuration Page306
- Configuring RSTP Port Settings309
- Viewing the RSTP Topology313
- Figure 92. Designated Topology Information Page313
Chapter 33: 802.1X Port-Based Network Access Control315
- Configuring 802.1X Port-Based Network Access Control316
- Figure 93. 802.1X Access Control Configuration Page316
Chapter 34: Dial-In User319
- Adding a Dial-In User320
- Figure 94. Dial-In User Page320
- Modifying a Dial-In User321
- Deleting a Dial-In User322
Chapter 35: RADIUS Authentication Protocol323
- Configuring the RADIUS Client324
- Figure 95. RADIUS Page324
Chapter 36: Statistics325
- Displaying Switch Statistics326
Chapter 37: Management Software Updates335
- Upgrading a Firmware Image Using TFTP336
- Figure 100. Firmware Upgrade Via TFTP Page337
- Upgrading a Firmware Image Using HTTP338
- Figure 101. Firmware Upgrade Via HTTP Page338
- Table 9. AT-S79 Default Settings341

Allied Telesis AT-S79 - Chapter 17 802.1 x Port-based Network Access Control

Table of Contents

Related product manuals