User`s manual

IKS-6726 Featured Functions
3-53
Ingress
Setting Description Factory Default
Ingress rate Select the ingress rate for all packets from the following
options: not limited, 3%, 5%, 10%, 15%, 25%, 35%, 50%,
65%, 85%
N/A
Using Port Access Control
The IKS-6726 provides two kinds of Port-Base Access Control. One is Static Port Lock and the other is IEEE
802.1X.
Static Port Lock
The IKS-6726 can also be configured to protect static MAC addresses for a specific port. With the Port Lock
function, these locked ports will not learn any additional addresses, but only allow traffic from preset static MAC
addresses, helping to block hackers and careless usage.
IEEE 802.1X
The IEEE 802.1X standard defines a protocol for client/server-based access control and authentication. The
protocol restricts unauthorized clients from connecting to a LAN through ports that are open to the Internet,
and which otherwise would be readily accessible. The purpose of the authentication server is to check each
client that requests access to the port. The client is only allowed access to the port if the client’s permission is
authenticated.
The IEEE 802.1X Concept
Three components are used to create an authentication mechanism based on 802.1X standards:
Client/Supplicant, Authentication Server, and Authenticator.
Supplicant: The end station that requests access to the LAN and switch services and responds to the requests
from the switch.
Authentication server: The server that performs the actual authentication of the supplicant.
Authenticator: Edge switch or wireless access point that acts as a proxy between the supplicant and the
authentication server, requesting identity information from the supplicant, verifying the information with the
authentication server, and relaying a response to the supplicant.