User`s manual

DWS-1008 User’s Manual

D-Link Systems, Inc.

Conﬁguration (continued)

Conguration

Conguring for Authenticating Users

A DWS-1008 switch can provide authentication, authorization, and accounting (AAA) services

for wireless and wired users. Wireless users are attached to a switch through an DWL-

8220AP access point. Wired users are attached to a switch through wired authentication

ports.

By default, all of the switch’s ports are set as wired network ports. Wired network ports

connect the switch to other networking devices such as switches and routers.

• To provide authentication to a wired user, you must set that user’s port to be a wired

authentication port.

• To provide authentication to wireless users, you must congure the switch to support a

DWL-8220AP. How you congure the switch will depend on how the AP is connected

to the switch. There are two categories of AP to switch connection: directly connected

and distributed.

• A directly connected AP connects to one or two 10/100 ports on a switch. The

switch’s 10/100 port provides PoE to the AP. The switch forwards data only

to and from the congured AP on that port. The port numbers on the switch

congured for direct attached APs reference a particular AP.

• An AP that is not directly connected to a switch is considered a Distributed AP.

The switch contains a conguration for a Distributed AP based on the AP’s serial

number. Similar to ports congured for directly connected APs, Distributed AP

congurations are numbered and can reference a particular AP. These numbered

congurations do not, however, reference any physical port.

Note: A Distributed AP is a leaf device. You do not need to enable STP on the port that

is directly connected to the AP. If Spanning Tree Protocol (STP) is enabled on the port

that is directly connected to a Distributed AP, D-Link recommends that you enable port fast

convergence (called PortFast on some vendors’ devices) on the port or disable STP on the

port.

Conguring a Port for a Wired Authentication User

A wired authentication user connects to the switch by a network cable. The user must

authenticate before connecting to the network. To set a port type for a wired authentication

user, use the following command:

set port type wired-auth port-list [tag tag-list] [max-sessions num]

The following example sets port 3 for a wired authentication user:

DWS-1008# set port type wired-auth 3

success: change accepted