User manual D-LINK DGS-3024

[. . . ] D-Link TM DGS-3024 Managed 24-Port Gigabit Ethernet Switch Manual DGS-3024 Gigabit Ethernet Switch Manual Information in this document is subject to change without notice. © 2004 D-Link Computer Corporation. Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-Link logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation. [. . . ] Bold font denotes the facility values that the Switch currently implements. 53 DGS-3024 Gigabit Ethernet Switch Manual Numerical Code 0 1 2 3 4 5 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 UDP Port Status kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by Syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 (local0) local use 1 (local1) local use 2 (local2) local use 3 (local3) local use 4 (local4) local use 5 (local5) local use 6 (local6) local use 7 (local7) Facility Enter the UDP port number used for sending Syslog messages. Choose Enabled or Disabled to activate or deactivate. To set the System Log Server configuration, click Apply. To delete an entry from the System Log Servers window, click under the Delete heading of the entry to delete. To return to the System Log Servers window, click the corresponding the Show All System Log Servers link. 54 DGS-3024 Gigabit Ethernet Switch Manual Port Access Entity 802. 1x Port-Based Access Control The IEEE 802. 1x standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local Area Network by using a Client and Server based access control model. This is accomplished by using a RADIUS server to authenticate users trying to access a network by relaying Extensible Authentication Protocol over LAN (EAPOL) packets between the Client and the Server. The following figure represents a basic EAPOL packet: Figure 6- 36. EAPOL Packet Utilizing this method, unauthorized devices are restricted from connecting to a LAN through a port to which the user is connected. EAPOL packets are the only traffic that can be transmitted through the specific port until authorization is granted. The 802. 1x Access Control protocol consists of three components, each of which is vital to creating and maintaining a stable and working Access Control security method. Figure 6- 37. Three Functions of 802. 1x The following section will explain Client, Authenticator, and Authentication Server in greater detail. Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch). Clients connected to a port on the Switch must be authenticated by the Authentication Server (RADIUS) before attaining any services offered by the Switch on the LAN. The role of the Authentication Server is to certify the identity of the Client attempting to access the 55 DGS-3024 Gigabit Ethernet Switch Manual network by exchanging secure information between the RADIUS server and the Client through EAPOL packets and, in turn, informs the Switch whether or not the Client is granted access to the LAN and/or switch services. Figure 6- 38. Authentication Server Authenticator The Authenticator (the Switch) is an intermediary between the Authentication Server and the Client. The Authenticator serves two purposes when utilizing 802. 1x. The first purpose is to request certification information from the Client through EAPOL packets, which is the only information allowed to pass through the Authenticator before access is granted to the Client. The second purpose of the Authenticator is to verify the information gathered from the Client with the Authentication Server, and to then relay that information back to the Client. Three steps must be implemented on the Switch to properly configure the Authenticator. The 802. 1x State must be enabled to Port Base on the Switch Information (Advanced Settings) window under Switch 802. 1X (Configuration > Advanced Settings). The 802. 1x settings must be implemented by port. (Configuration > Port Access Entity > 802. 1X Capability Settings). [. . . ] D-LINK può richiedere che venga esibita la prova di acquisto. Garante D-Link (Europe) Ltd. 4th Floor, Merit House Edgware Road Colindale Londra NW9 5 AB Regno Unito Telefono: +44-020-8731-5555 Fax: +44-020-8731-5511 www. dlink. co. uk 128 Offices U. S. A 17595 Mt. 92708 TEL: 714-885-6000 FAX: 866-743-4905 URL: www. dlink. com Canada 2180 Winston Park Drive Oakville, Ontario, L6H 5W1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www. dlink. ca Europe (U. K. ) 4th Floor, Merit House Edgware Road, Colindale London NW9 5AB U. K. [. . . ]