User manual D-LINK DGS-3024

[. . . ] D-Link TM DGS-3024 Managed 24-Port Gigabit Ethernet Switch Manual DGS-3024 Gigabit Ethernet Switch Manual Information in this document is subject to change without notice. Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-Link logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. [. . . ] 53 DGS-3024 Gigabit Ethernet Switch Manual Numerical Code 0 1 2 3 4 5 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 UDP Port Status kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by Syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 (local0) local use 1 (local1) local use 2 (local2) local use 3 (local3) local use 4 (local4) local use 5 (local5) local use 6 (local6) local use 7 (local7) Facility Enter the UDP port number used for sending Syslog messages. Choose Enabled or Disabled to activate or deactivate. To set the System Log Server configuration, click Apply. To delete an entry from the System Log Servers window, click under the Delete heading of the entry to delete. To return to the System Log Servers window, click the corresponding the Show All System Log Servers link. 54 DGS-3024 Gigabit Ethernet Switch Manual Port Access Entity 802. 1x Port-Based Access Control The IEEE 802. 1x standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local Area Network by using a Client and Server based access control model. This is accomplished by using a RADIUS server to authenticate users trying to access a network by relaying Extensible Authentication Protocol over LAN (EAPOL) packets between the Client and the Server. The following figure represents a basic EAPOL packet: Figure 6- 36. EAPOL Packet Utilizing this method, unauthorized devices are restricted from connecting to a LAN through a port to which the user is connected. EAPOL packets are the only traffic that can be transmitted through the specific port until authorization is granted. The 802. 1x Access Control protocol consists of three components, each of which is vital to creating and maintaining a stable and working Access Control security method. Figure 6- 37. Three Functions of 802. 1x The following section will explain Client, Authenticator, and Authentication Server in greater detail. Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch). Clients connected to a port on the Switch must be authenticated by the Authentication Server (RADIUS) before attaining any services offered by the Switch on the LAN. The role of the Authentication Server is to certify the identity of the Client attempting to access the 55 DGS-3024 Gigabit Ethernet Switch Manual network by exchanging secure information between the RADIUS server and the Client through EAPOL packets and, in turn, informs the Switch whether or not the Client is granted access to the LAN and/or switch services. Figure 6- 38. Authentication Server Authenticator The Authenticator (the Switch) is an intermediary between the Authentication Server and the Client. The first purpose is to request certification information from the Client through EAPOL packets, which is the only information allowed to pass through the Authenticator before access is granted to the Client. The second purpose of the Authenticator is to verify the information gathered from the Client with the Authentication Server, and to then relay that information back to the Client. Three steps must be implemented on the Switch to properly configure the Authenticator. The 802. 1x State must be enabled to Port Base on the Switch Information (Advanced Settings) window under Switch 802. 1X (Configuration > Advanced Settings). (Configuration > Port Access Entity > 802. 1X Capability Settings). A RADIUS server must be configured on the Switch on the Authentic RADIUS Server Setting window (Configuration > Port Access Entity > RADIUS Server). Figure 6- 39. Authenticator 56 DGS-3024 Gigabit Ethernet Switch Manual Client The Client is simply the workstation that wishes to gain access to the LAN or switch services. All workstation must be running software that is compliant with the 802. 1x protocol. [. . . ] D-LINK può richiedere che venga esibita la prova di acquisto. Garante D-Link (Europe) Ltd. 4th Floor, Merit House Edgware Road Colindale Londra NW9 5 AB Regno Unito Telefono: +44-020-8731-5555 Fax: +44-020-8731-5511 www. dlink. co. uk 128 Offices U. S. A 17595 Mt. 92708 TEL: 714-885-6000 FAX: 866-743-4905 URL: www. dlink. com Canada 2180 Winston Park Drive Oakville, Ontario, L6H 5W1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www. dlink. ca Europe (U. K. ) 4th Floor, Merit House Edgware Road, Colindale London NW9 5AB U. K. [. . . ]