D-Link xStack DGS-3610 Series User Manual

Chapter 37 Configuration of 802.1X DGS-3610 Series Configuration Guide
37-22
DGS-3610# configure terminal
DGS-3610(config)# aaa accounting update
DGS-3610(config)# end
DGS-3610# write memory
DGS-3610# show running-config
37.2.14 Configuring IP Authorization Modes
The 802.1X implemented on DGS-3610 series can force the authenticated users to use fixed
IP. By configuring the IP authorization mode, the administrator can limit the way the user
gets IP address. There are four IP authorization modes: DISABLE, DHCP SERVER,
RADIUS SERVER and SUPPLICANT. There are detailed below respectively:
DISABLE mode (default): The device has no limitation for the user IP, and the user only
needs to pass the authentication to be able to access the network.
DHCP SERVER mode: The user IP is obtained via specified DHCP SERVER, and only the
IP allocated by the specified DHCP SERVER is considered legal. For the DHCP mode, it is
possible to use DHCP relay option82 to implement a more flexible IP allocation policy with
the 802.1X. Here is a typical diagram for the plan:
Figure 37-5
DHCP Server
VLAN 30
user B
Function device with dhcp relay agent
information Option
1
2
user A
user B
User
Authority
user A
user B
1
2
20
30
VID
Authority
User
1
2
20
30
VID
Configure IP
Policy 1
Policy 2
Authority
VLAN 20
user A
SAM
The user initiates IP requests via the DHCP Client. The network device with dhcp relay
option82 converges the user authority on the SAM server to construct the option82 field and
encapsulate it in the DHCP request packet. That option82 field consists of ―vid + permission‖.
The DHCP Server chooses different allocation policies by using the option82 field.

D-Link xStack DGS-3610 Series Specifications

General

Brand	D-Link
Model	xStack DGS-3610 Series
Category	Switch
Language	English