BayStack 450 10/100/1000 Series Switches
309978-D Rev 01 1-19
-- MAC address-based security allows up to 448 authorized stations (MAC
addresses) access to one or more switch ports (see
“MAC Address-Based
Security” on page 1-20).
-- EAPOL-based security provides port-based network access control to
authenticate devices based on user authentication (see
“EAPOL-Based
Security” on page 1-21).
-- RADIUS-based security limits administrative access through user
authentication (see
“RADIUS-Based Security” on page 1-28).
-- SNMP-based security limits administrative access through selective IP
filtering (see
“SNMP-Based Security” on page 1-29).
• Student dormitory
Dormitory rooms, typically occupied by two students, are prewired with two
RJ-45 jacks. Only students who are authorized (as specified by the MAC
address-based security feature) can access the switch on the secured ports.
• Teachers’ offices and classrooms
The PCs that are located in the teachers’ offices and in the classrooms are
assigned MAC address-based security that is specific for each classroom and
office location. The security feature logically locks each wall jack to the
specified station and prevents unauthorized access to the switch should
someone attempt to connect a personal laptop PC into the wall jack.
The printer is assigned as a single station and is allowed full bandwidth on
that switch port. It is assumed that all PCs are password protected and that the
classrooms and offices are physically secured.
• Library
The wall jacks in the library are set up so that the PCs can be connected to any
wall jack in the room. This allows the PCs to be moved anywhere in the room.
The exception is the printer, which is assigned as a single station with full
bandwidth to that port. It is assumed that all PCs are password protected and
that access to the library is physically secured.