User manual

xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch
235
Switch will prompt the administrator for a password, and then to re-type the password
for confirmation.
Public Key – This parameter should be chosen if the administrator wishes to use the
publickey on a SSH server for authentication.
Host Name
Enter an alphanumeric string of no more than 31 characters to identify the remote
SSH user. This parameter is only used in conjunction with the Host Based choice in
the Auth. Mode field.
Host IP
Enter the corresponding IP address of the SSH user. This parameter is only used in
conjunction with the Host Based choice in the Auth. Mode field.
Click Apply to implement changes made.
NOTE: To set the SSH User Authentication parameters on the Switch, a
User Account must be previously configured. For more information on
configuring local User Accounts on the Switch, see the User Accounts
section of this manual located in this section.
IP-MAC Binding
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address.
Binding these two address types together allows the transmission of data between the layers. The
primary purpose of IP-MAC binding is to restrict the access to a switch to a number of authorized
users. Only the authorized client can access the Switch’s port by checking the pair of IP-MAC
addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC binding
enabled port, the system will block the access by dropping its packet. The maximum number of IP-
MAC binding entries is dependant on chip capability (e.g. the ARP table size) and storage size of the
device. The maximum number of IP-MAC Binding entries is 500. The creation of authorized users can
be manually configured by CLI or Web. The function is port-based, this means a user can enable or
disable the function on the individual port.
IP-MAC Binding Port
To enable or disable IP-MAC binding on specific ports, click Security > IP - MAC Binding > IP -
MAC Binding Port to open the IP-MAC Binding Ports Setting window. Select a port or a range of
ports with the From and To fields. Enable or disable the port with the State field. Click Apply to
save changes.