28
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuration (continued)
Configuration
Configuring for Authenticating Users
A DWS-1008 switch can provide authentication, authorization, and accounting (AAA) services
for wireless and wired users. Wireless users are attached to a switch through an DWL-
8220AP access point. Wired users are attached to a switch through wired authentication
ports.
By default, all of the switch’s ports are set as wired network ports. Wired network ports
connect the switch to other networking devices such as switches and routers.
• To provide authentication to a wired user, you must set that user’s port to be a wired
authentication port.
• To provide authentication to wireless users, you must configure the switch to support a
DWL-8220AP. How you configure the switch will depend on how the AP is connected
to the switch. There are two categories of AP to switch connection: directly connected
and distributed.
• A directly connected AP connects to one or two 10/100 ports on a switch. The
switch’s 10/100 port provides PoE to the AP. The switch forwards data only
to and from the configured AP on that port. The port numbers on the switch
configured for direct attached APs reference a particular AP.
• An AP that is not directly connected to a switch is considered a Distributed AP.
The switch contains a configuration for a Distributed AP based on the AP’s serial
number. Similar to ports configured for directly connected APs, Distributed AP
configurations are numbered and can reference a particular AP. These numbered
configurations do not, however, reference any physical port.
Note:
A Distributed AP is a leaf device. You do not need to enable STP on the port that
is directly connected to the AP. If Spanning Tree Protocol (STP) is enabled on the port
that is directly connected to a Distributed AP, D-Link recommends that you enable port fast
convergence (called PortFast on some vendors’ devices) on the port or disable STP on the
port.
Configuring a Port for a Wired Authentication User
A wired authentication user connects to the switch by a network cable. The user must
authenticate before connecting to the network. To set a port type for a wired authentication
user, use the following command:
set port type wired-auth port-list [tag tag-list] [max-sessions num]
The following example sets port 3 for a wired authentication user:
DWS-1008#
set port type wired-auth 3
success: change accepted
Summary of Contents for DWS-1008
Page 1: ......
