D-Link xStack DGS-3200-10 - Page 153

xStack
®
DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch
140
Host-based Network Access Control
802.1X
Client
Network access controlled port
Network access uncontrolled port
RADIUS
Server
Ethernet Switch
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
802.1X
Client
…
Figure 5 - 24. Example of Typical Host-based Configuration
In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one
for each attached device that required access to the LAN. The Switch would regard the single physical Port c onnecting it to the
shared media segment as consisting of a number of distinct l ogical Ports, each l ogical Port be ing independently controlled from
the point of view of EAPOL exc hanges a nd aut horization state. T he Switch lea rns each attache d devices’ indivi dual M AC
addresses, and effectively creates a logical Port that the attached device can then use to communicate with the LAN via the Switch.
The 802.1X folder contains seven windows (depending on the current 802.1X) settings: 802.1X Settings, 802.1X User, Initialize
Port(s) (Port-based and MAC-based), Reauthenticate Port(s) (Port-based and MAC-based), and Authentic RADIUS Server.