xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch
287
MAC-Based Access Control Global Settings
The following window is used to set the parameters for the MAC-Based Access Control function on the Switch. Here the user can
set the running state, method of authentication, RADIUS password and view the Guest VLAN configuration to be associated with
the MAC-Based Access Control function of the Switch. To view this window, click Security > MAC-Based Access Control >
MAC-Based Access Control Global Settings.
Figure 11- 61. MAC-Based Access Control Global Settings
The following parameters may be viewed or set:
Parameter Description
State
Use the pull-down menu to globally enable or disable the MAC-Based Access Control
function on the Switch.
Method
Use the pull-down menu to choose the type of authentication to be used when
authentication MAC addresses on a given port. The user may choose between the
following methods:
Local – Use this method to utilize the locally set MAC address database as the
authenticator for MAC-Based Access Control. This MAC address list can be
configured in the MAC-Based Access Control Local Database Settings window.
RADIUS – Use this method to utilize a remote RADIUS server as the authenticator for
MAC-Based Access Control. Remember, the MAC list must be previously set on the
RADIUS server and the settings for the server must be first configured on the Switch.
Password
Enter the password for the RADIUS server, which is to be used for packets being sent
requesting authentication. The default password is “default”.
Guest VLAN Name
Displays the name of the previously configured Guest VLAN being used for this
function. Clicking the hyperlinked name will send the web manager to Guest VLAN
configuration screen for MAC-Based Authentication.
Guest VLAN Member Ports
Displays the list of ports that have been configured for the Guest VLAN.
Clicking the hyperlinked Guest VLAN Name in the window above will display the following window, in which the user can
configure ports to be used for MAC-Based Access Control within the Guest VLAN.
