Planet IGS-20040MT User Manual

User’s Manual of IGS-20040MT
The Page includes the following fields:
Object Description
The management clie
nt for which the configuration below applies.
 Client
 Authentication Method
Authentication Method can be set to one of the following values:
■ None: authentication is disabled and login is not possible.
■ Local: use the local user database on the switch stack for authentication.
■ RADIUS: use a remote RADIUS server for authentication.
■ TACACS+: use a remote TACACS+ server for authentication.
Methods that involves remote servers are timed out if the remote servers are
offline. In this case the next method is tried. Each method is tried from left to right
and continues until a method either approves or rejects a user. If a remote server
is used for primary authentication it is recommended to configure secondary
authentication as 'local'. This will enable the management client to login via the
local user database if none of the configured authentication servers are alive.
Buttons
: Click to apply changes
: Click to undo any changes made locally and revert to previously saved values.
4.11.3 Network Access Server Configuration
This Page allows you to configure the IEEE 802.1X and MAC-based authentication system and port settings.
The IEEE 802.1X standard defines a port-based access control procedure that prevents unauthorized access to a network by
requiring users to first submit credentials for authentication. One or more central servers, the backend servers, determine
whether the user is allowed access to the network. These backend (RADIUS) servers are configured on the
"Configuration→Security→AAA" Page. The IEEE802.1X standard defines port-based operation, but non-standard variants
overcome security limitations as shall be explored below.
MAC-based authentication allows for authentication of more than one user on the same port, and doesn't require the user to
have special 802.1X supplicant software installed on his system. The switch uses the user's MAC address to authenticate
against the backend server. Intruders can create counterfeit MAC addresses, which makes MAC-based authentication less
secure than 802.1X authentication. The NAS configuration consists of two sections, a system- and a port-wide. The Network
Access Server Configuration screen in Figure 4-11-4 appears.
240

Planet IGS-20040MT Specifications

General

Switch type	Managed
Switch layer	L2+
Traffic classification	Yes
Console port	RJ-45
Fiber optic connector	MiniGBIC
SFP module slots quantity	4
Installed SFP modules quantity	0
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Basic switching RJ-45 Ethernet ports quantity	16
10G support	No
Number of VLANs	4095
Networking standards	IEEE 1588v2, IEEE 802.1D, IEEE 802.1Q, IEEE 802.1ab, IEEE 802.1ad, IEEE 802.1ag, IEEE 802.1p, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ah, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Virtual LAN features	Stacked VLAN, Private VLAN, Tagged VLAN, Protocol-based VLAN
Copper ethernet cabling technology	10BASE-T, 100BASE-TX, 1000BASE-T
Stackable	-
Certification	FCC, CE
Product color	Blue, White
Housing material	Aluminum
International Protection (IP) code	IP30
Fiber ethernet cabling technology	100BASE-FX, 1000BASE‑BX, 1000BASE‑LX, 1000BASE‑SX
Throughput	29.7 Mpps
Jumbo frames	9216
MAC address table	8000 entries
Number of IP interfaces	8
Power consumption (max)	17 W
Power consumption (typical)	8 W
Heat dissipation	27 BTU/h
Storage temperature (T-T)	-40 - 85 °C
Operating temperature (T-T)	-40 - 75 °C
Operating relative humidity (H-H)	5 - 95 %
Supported network protocols	IPv4 / IPv6
Authentication	MAC-based authentication, Port-based authentication
Security algorithms	802.1x RADIUS, SSH, SSL/TLS
Number of multicast groups filtered	255
Harmonized System (HS) code	85176990

Weight and Dimensions

Depth	107.3 mm
Width	76.8 mm
Height	152 mm
Weight	1043 g