User manual AIRLIVE SNMP-GSH2404L

[. . . ] SNMP-GSH2404L 24+4 Gigabit SNMP Lite Switch User's Manual Copyright and Disclaimer Copyright & Disclaimer No part of this publication may be reproduced in any form or by any means, whether electronic, mechanical, photocopying, or recording without the written consent of OvisLink Corp. has made the best effort to ensure the accuracy of the information in this user's guide. However, we are not liable for the inaccuracies or errors in this guide. All information is subject to change without notice All Trademarks are properties of their respective holders. AirLive SNMP-GSH2404L User's Manual Copyright and Disclaimer Federal Communications Commission (FCC) Statement This equipment has been tested and found to comply with the limits for a class A computing device pursuant to Subpart J of part 15 of FCC Rules, which are designed to provide reasonable protection against such interference when operated in a commercial environment. [. . . ] If the authenticator receives a Radius-Access-Reject, it will send an EAP-Failure to the supplicant. This means the supplicant is failed to authenticate. The port it connected is in the unauthorized state, the supplicant and the devices connected to this port won't be allowed to access the network. 2. 3. When the supplicant issue an EAP-Logoff message to Authentication server, the port you are using is set to be unauthorized. AirLive SNMP-GSH2404L User's Manual 34 4. Web Management in SNMP-GSH2404L Bridge PC LAN Access blocked EAPOL-Start EAPOL Authenticator EAP Radius Server Radius EAP-Request/Identity Radius-Access-Request EAP-Response/Identity Radius-Access-Challenge EAP-Request Radius-Access-Request EAP-Response (cred) Radius-Access-Accept EAP-Success EAP-Failure EAP-Logoff Access allowed The 802. 1X "Enabled" is the type of authentication supported in the switch. In this mode, for the devices connected to this port, once a supplicant is authorized, the devices connected to this port can access the network resource through this port. 802. 1x Port-based Network Access Control function supported by the switch is little bit complex, for it just support basic "Enabled" mode, which can distinguish the device's MAC address and its VID. The following table is the summary of the combination of the authentication status and the port status versus the status of port mode, set in 802. 1x Port mode, port control state, set in 802. 1x port setting. Here Entry Authorized means MAC entry is authorized. Port Mode Disable Enabled Enabled Enabled Enabled Port Control Don't Care Auto Auto ForceUnauthorized ForceAuthorized Authentication Don't Care Successful Failure Don't Care Don't Care Port Status Port Uncontrolled Port Authorized Port Unauthorized Port Unauthorized Port Authorized 35 AirLive SNMP-GSH2404L User's Manual 4. Web Management in SNMP-GSH2404L Function name: 802. 1X Configuration Function description: This function is used to configure the global parameters for RADIUS authentication in 802. 1x port security application. Parameter description: Mode: Enable or disable 802. 1X function. RADIUS IP: RADIUS server IP address for authentication. Default: 0. 0. 0. 0 RADIUS UDP Port: The port number to communicate with RADIUS server for the authentication service. RADIUS Secret: The secret key between authentication server and authenticator. It is a string with the length 1 ­ 15 characters. The character string may contain upper case, lower case and 0-9. It is not allowed for putting a blank between any two characters. Default: None Admin State: This is used to set the operation mode of authorization. There are three type of operation mode supported, Force Unauthorized, Force Authorized, Auto. Force Unauthorized: The controlled port is forced to hold in the unauthorized state. Force Authorized: The controlled port is forced to hold in the authorized state. Auto: The controlled port is set to be in authorized state or unauthorized state depends on the result of the authentication exchange between the authentication server and the supplicant. [. . . ] An IP address has two parts: an identifier of a particular network on the Internet and an identifier of the particular device (which can be a server or a workstation) within that network. The new IPv6 specification supports 128-bit IP address format. LACP (802. 3ad) Trunking Link Aggregation Control Protocol. It is protocol defines how to combine the several Ethernet ports into one high-bandwidth port to increase the transmission speed. Both devices must set the trunking feature to work. 71 AirLive SNMP-GSH2404L User's Manual 7. [. . . ]