User manual ZYXEL GS-2750

[. . . ] GS-2750 Intelligent Layer 3+ Switch User's Guide Version 3. 80 11/2007 Edition 1 DEFAULT LOGIN In-band IP Address Out-of-band IP Address User Name Password http://192. 168. 1. 1 http://192. 168. 0. 1 admin 1234 www. zyxel. com About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the Switch using the web configurator or via commands. You should have at least a basic knowledge of TCP/IP networking concepts and topology. Related Documentation · Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information. · Command Reference Guide The Command Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands to configure the Switch. It is recommended you use the web configurator to configure the Switch. · Supporting Disk Refer to the included CD for support documents. [. . . ] See Section 23. 1. 2 on page 182 for more information on configuring your RADIUS server settings. If you enable IEEE 802. 1x authentication and MAC authentication on the same port, the Switch performs IEEE 802. 1x authentication first. If a user fails to authenticate via the IEEE 802. 1x method, then access to the port is denied. 16. 1. 1 IEEE 802. 1x Authentication The following figure illustrates how a client connecting to a IEEE 802. 1x authentication enabled port goes through a validation process. The Switch prompts the client for login information in the form of a user name and password. When the client provides the login credentials, the Switch sends an authentication request to a RADIUS server. The RADIUS server validates whether this client is allowed access to the port. 2. At the time of writing, IEEE 802. 1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802. 1x, then you may need to install 802. 1x client software. GS-2750 User's Guide 135 Chapter 16 Port Authentication Figure 62 IEEE 802. 1x Authentication Process 1 New Connection 2 Login Info Request 3 Login Credentials 4 Authentication Request 5 Authentication Reply Session Granted/Denied 16. 1. 2 MAC Authentication MAC authentication works in a very similar way to IEEE 802. 1x authentication. The main difference is that the Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. Figure 63 MAC Authentication Process 1 New Connection 2 Authentication Request 3 Authentication Reply Session Granted/Denied 136 GS-2750 User's Guide Chapter 16 Port Authentication 16. 2 Port Authentication Configuration To enable port authentication, first activate the port authentication method(s) you want to use (both on the Switch and the port(s)), then configure the RADIUS server settings in the Auth and Acct > Radius Server Setup screen. To activate a port authentication method, click Advanced Application > Port Authentication in the navigation panel. Select a port authentication method in the screen that appears. Figure 64 Advanced Application > Port Authentication 16. 2. 1 Activate IEEE 802. 1x Security Use this screen to activate IEEE 802. 1x security. In the Port Authentication screen click 802. 1x to display the configuration screen as shown. Figure 65 Advanced Application > Port Authentication > 802. 1x GS-2750 User's Guide 137 Chapter 16 Port Authentication The following table describes the labels in this screen. Table 39 Advanced Application > Port Authentication > 802. 1x LABEL Active DESCRIPTION Select this check box to permit 802. 1x authentication on the Switch. Note: You must first enable 802. 1x authentication on the Switch before configuring it on each port. Port * This field displays a port number. Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. Active Reauthentication Reauthentication Timer Apply Select this checkbox to permit 802. 1x authentication on this port. You must first allow 802. 1x authentication on the Switch before configuring it on each port. Specify if a subscriber has to periodically re-enter his or her username and password to stay connected to the port. Specify the length of time required to pass before a client has to re-enter his or her username and password to stay connected to the port. Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. Cancel 16. 2. 2 Activate MAC Authentication Use this screen to activate MAC authentication. In the Port Authentication screen click MAC Authentication to display the configuration screen as shown. 138 GS-2750 User's Guide Chapter 16 Port Authentication Figure 66 Advanced Application > Port Authentication > MAC Authentication The following table describes the labels in this screen. Table 40 Advanced Application > Port Authentication > MAC Authentication LABEL Active DESCRIPTION Select this check box to permit MAC authentication on the Switch. Note: You must first enable MAC authentication on the Switch before configuring it on each port. Name Prefix Type the prefix that is appended to all MAC addresses sent to the RADIUS server for authentication. [. . . ] Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. [. . . ]