|
Radius Server
RADIUS proxy servers are used for centralized administration. Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users that connect and use a network service for greater convenience.
802.1X Authentication Protocol
IEEE 802.1X is an IEEE Standard for port-based Network Access Control (PNAC). It is part of the IEEE 802.1 group of networking protocols. It provides an authentication mechanism to devices wishing to attach to a LAN or WLAN.
802.1x Port-based Access Control
The IEEE 802.1X port-based authentication provides a security standard for network access control with RADIUS servers and holds a network port disconnected until authentication is completed. With 802.1X port-based authentication, the supplicant provides the required credentials, such as user name, password, or digital certificate to the authenticator, and the authenticator forwards the credentials to the authentication server for verification to the guest VLAN.
MAC-Based Port Security (MAC-based Access Control)
Network security can be increased by limiting access on a specific port to users with specific MAC addresses. Port Security prevents unauthorized device to the Switch prior to stopping auto-learning processing.
Authenticated Host
The Authenticated Host displays the Authenticated User Name, Port, Session Time, Authenticated Method, and Mac Address.
Guest VLAN
A Guest VLAN is a VLAN that allows guests to get in the network. For example, employees and guests can access the wireless network of a company at the same time and be administratively separate.
VLAN Tag
Independent VLAN setting can be enable or disable. Any packet that enters the Device without a VLAN tag will have a VLAN tag inserted with a PVID (Ethernet Port VID).
Radius VLAN Assignment
VLAN assignments build on the use of RADIUS to control access to the network. Via RADIUS integration, a WiFi access point (WAP) requires not only an SSID and passphrase, but a user’s unique set of credentials to access the network. Once a user has passed credentials through to the WAP and they are subsequently passed to the RADIUS server and directory service, the RADIUS server will reply to the WAP that the user has been authenticated and inform what VLAN they are assigned to.
Management VLAN
Feature is enabled with specified VLAN ID, the device will only allow management access with the same specified VLAN ID from remotely location by using protocols such as telnet, SSH, snmp, syslog etc.
Storm Control
Storm Control limits the amount of Broadcast, Unknown Multicast, and Unknown Unicast frames accepted and forwarded by the Switch. Storm Control can be enabled per port by defining the packet type and the rate that the packets are transmitted at.
Port Isolation
Port Isolation feature provides L2 isolation between ports within the same broadcast domain. When enabled, Isolated ports can forward traffic to Not Isolated ports, but not to other Isolated ports. Not Isolated ports can send traffic to any port; whether Isolated or Not Isolated.
DoS Attack Prevention
Denial of Service attack is an attack on the computer or network that restricts, reduce or prevents system restore accessibility to its legitimate users. It is a kind of attack in which an attacker or intruder tries to deprive system users or authorized users of accessing their computers, networks or sites. Enable DoS Attach prevention feature to classifying and blocking specific types of DoS attacks.
Access Control List
An Access Control List (ACL) allows you to define classification rules or establish criteria to provide security to your network by blocking unauthorized users and allowing authorized users to access specific areas or resources. ACLs can provide basic security for access to the network by controlling whether packets are forwarded or blocked at the Switch ports.
Login Authentication Control
Support SSH/Telnet command or HTTP/HTTPS login methods
|
