Planet Technology WSW-2401 manuale d’uso

24 Por t s + 1 slot Managed E thernet S w itch WS W -2401 User ’ s Manual[...]

2 T rademar k s Copyright  PLANET Technology Corp. 2003. Conten t s subject to revision w ithout prior no t ice. PLANET is a registered trademark o f PLANET Technology Corp. All o t her tradema r ks belon g to their respective o w ners. Disc l aim e r PLANET Technology does no t w arrant that the hard w are w ill w ork properly in all envi r onm[...]

3 T A BLE OF CONTENTS C H A P T ER 1 IN T RODUC T ION...................................................................................1 1.1 C HECKLIST ........................................................................................................................ .1 1.2 A BOUT THE S W ITCH .................................................[...]

4 3.7-3 TFTP Co n fi g ura t io n ................................................................................................ . 29 3.8 L OGOUT .......................................................................................................................... . 30 C H A P T ER 4 WEB M A N A G EMEN T ......................................[...]

5[...]

1 Chapter 1 Introduction 1.1 Chec k li s t T han k y ou f or p urchasi n g Pla n et ’ s W S W -2401 M ana g ed Et h erne t Switch e s. Be f or e conti n uing, pl e ase chec k the cont e n t s o f y o ur p ac k age f or f ollowi n g p ar t s: Ø W S W -2401 Man a ged Et h e r net S w itch Ø P o w er Cord Ø RS-2 3 2 ca b le Ø CD-ROM Ø Quic k in[...]

2 1.3 Product Feat u re Ø 24 p or t s 10/ 1 00 T X and 1 s lot f or option 1 or 2 por t s 10 0FX m odule Ø T elnet, cons o le a nd web m ana g ea b le Ø 8K MAC add r ess, auto - ag e ing Ø Su p port IG M P Ø Provi d e 8 . 8Gb p s s w itch f a b ric Ø IEEE 8 02. d S pan n i n g tre e p rotocol Ø IEEE 8 02.1Q T ag V L AN wi t h GV R P Ø IEEE [...]

3 Chapter 2 H A RD W A RE INS T A L L A T ION T his section is describes th e har d ware f ea t ures a n d i n s t all a ti o n o f 2 4 por t s + 1 s lot M a n a ged Ethe r net S w itch. Be f ore using W S W 2 401, read the user ’ s m anual care f ul l y . W S W 2400 has f our di f f erent m odules f or ex p ansi o n: Ø W S W -1 S T - 1port 1 0 [...]

4 Of f No d e vice attached. Orange T he port is o pera t in g i n Full-duplex m ode. Blin k s Collision o f Pac k e t s occurs in t he p ort. FDX/COL Of f T he opera t ing in h a l f -dupl e x m ode 10/ 1 0 0 M bp s Eth e rnet por ts T here are 2 4 10 / 10 0 Mb p s R-J45 por t s wi t h 1 sl o t f or 1 or 2-por t 1 0 0Base-FX f iber m odule . T he [...]

5 Ø Fl o w co n trol : n o ne After f inished the s e tting, clic k OK . 2.2 Re a r Panel T he Rear Pan e l o f the s w i t ch is indica t es an AC 3 pr o nged po w er soc k et and V e ntila t ion f an . T his s w itch will wor k w it h AC in the r a n g e 1 0 0-2 4 0V AC, 50- 6 0 H z. Figure 2-5 Rear Panel of W S W - 2401 Power R ecept a cle For [...]

6 M odu l e insta l lation T he slot on the f on t p a n e l is purposed f or installing op t io n al m odules. Foll o wi n g s t eps is describe d h o w to inst a ll a m odule. 1. P o w er o ff the switch. 2. Re m oving the t w o scr e w s o n th e f acepla t e o f slot wi t h a f lat-he a d scr e w driver. 3. Push t he m odul e g e nt l y in t o [...]

7 Chapter 3 C o nsole and T elnet Management 3.1 connec t T o P C by RS-23 2 ca b le T he RS-2 3 2 cons o le port i s an in t er f ace tha t d irect l y c o nnec t s t o th e PC. W hen th e connec t io n be t w e en t h e PC a nd switch is rea d y , run t he H y p er T erminal a n d con f igure i t s communication p aramet e rs. T he oper a ting m [...]

8 3.3 M a in Menu Contr o l ke y descri b e: T ab/Backs p ace: M o ve t he ver n ier t o con f igur e i t e m . Enter: Select i t e m . Sp ace: T oggle selecte d i te m to next con f igure or c h a n ge t h e value. Esc: t o exit t h e current action There are five selections as follo w . Ø St atus and Counters: Sh o w t he s t a t us o f the s wi[...]

9 3.4-1 Port S tatus In t h is f unctio n , i t dis p l a y s the s t a t us o f each p ort. Select t h e <Pre v ious Pa g e> or <Next Pag e> t o d ispl a y t he previ o us p ag e or n ext p a g e. 3.4-2 Port Counters In t h is f unctio n is d ispl a y current port c o un t er in f o rm ation. S e lect <C l ear> to set all p or t [...]

10 M odule . 3.5 Switch Confi g uration T here are 9 m ain f uncti o ns i n Switc h con f igur a tion, w hich is A dmin i stration c o nfiguration, Port configuration, T runk Configuration, Port M irroring Configura t ion, V L A N Configuration, Priori t y C onfiguration, M A C A ddr e ss Configuration, M isc C onfiguration and M ain M enu. T here [...]

11 3.5-1-1 D evice Infor m ation Y o u can c o n f igure t he d e vi c e in f or m ation Ø Select t h e <Edi t > to m odi f y the N a m e, Descripti o n, Lo catio n a n d C o n t act Ø After setup co m plete press ESC g o es bac k to acti o n m enu Ø After con f iguration press <Sa v e> to s a ve c o n f igura t i o n 3.5-1-2 I P Con[...]

12[...]

13 3.5-1-4 Password C o nfiguration All o w user to m odi f y t h e p a ss w ord Ø Select t h e <Edi t> Ø Old p ass w ord : enter t he old p as s w ord Ø Ne w p ass w ord : enter the n e w pass w o r d Ø Enter again : re- e nter t he ne w p as s w ord ag a in Ø Press <Sa v e> t o save t h e c on f igura t i o n 3.5-2 Port configura[...]

14 3.5-3 T runk Configu r ation Y o u can c o n f igure port tr unk group Ø Select <Edi t> Ø Use TAB ke y m ove to t he p ort tha t y o u want t o a dd as trun k group Ø Use Sp ace ke y t o m ar k the port Ø Use TA B ke y m ove t o tr u n k # (eg turn k 1, tru n k 2 … etc) to change t he tr u n k # v a lue t o St atic or L A CP Ø Press[...]

15 3.5-5 VLAN Configuration T here are f ive sub- m enus in V L AN C o n f igura t i o n, w h ich is V L A N Configurati o n, Create a V L A N Group, Edit/D e lete V L A N Group , G roup Sor t ed M ode and Pre v ious M e nu 3.5-5-1 VLAN configure Y o u m ust enable VLAN m ode in VLAN con f igu r e f unction b e f ore y o u s t art t o con f igure V[...]

16 3.5-5-2 C r eate VLAN Group Creat e V L A N Ø Select <Edi t> Ø Ty p e a na m e f or ne w V L A N Ø Use TAB ke y m ove to V L A N ID a nd g ive a n e w ID nu m ber Ø Choic e dif f erent V L AN pro t ocol t hrou g h t h e Sp a ce ke y Ø Set T agged, Un t a gg e d or n o o f each p ort Ø Press ESC a n d ch o ice <S av e> to s a ve[...]

17 3.5-5-4 Group S tored Mode Y o u can s e lect V L AN Gro u p s sorted m ode: 1) Name 2) V L A N ID Ø Select <Edit> Ø Use Sp ace ke y t o select t h e sorted m ode Ø Press <Sa v e> t o s a ve t o con f igura t i o n 3.5-5-5 Previous Me n u Return t o pr e vious m enu 3.5-6 Priority Config u ration In t h is f unctio n y o u ca n co[...]

18 3.5-7 MAC Address C onfiguration T here are t hre e sub- m enus i n M A C A d dress C o n f ig u ratio n , whic h i s St atic M A C A ddress , Filtering M A C A ddress a n d Pre v ious M enu 3.5-7-1 S tatic MAC Address Ø Select < A d d> t o a dd a S tatic MA C Address Ø After setup co m plete press ESC g o es bac k to acti o n m enu Ø P[...]

19 3.5-7-3 Previous Me n u Return t o pr e vious m enu 3.5-8 Misc Configura t ion Y o u can c o n f igure t he s wit c h p ara m eter Ø M A C A ddress A g eing Time: MA C a d dress t able re f resh ti m e setting. T he v a lid r a nge is 0, 3 0 0~76 5 seconds. D e f a u lt is 300 sec o nds Ø Broadc a st S torm Filter m ode: con f igure t h e bro [...]

20 3.5-9 Main Menu Return t o m ain m enu 3.6 Protocol Rela t ed Configuration T here are six m ain f uncti o ns in P r otoc o l R e lat e d C onf igurati o n, which is S T P , SN M P , L A C P , IG M P/GV R P , 8 02. 1 X Conf i guration a n d Pre v ious M enu 3.6-1 ST P Configuration T his sub- m enu con t ains f our i t e m s, w hic h is S T P S [...]

21 3.6-1-1 ST P setup Provi d e e n a b le or dis a ble S T P f unction Ø Select< Edit> Ø Use < Sp a c e> ke y to c h oic e op t ion Ø After c o m plete press <Sa v e> to s ave t h e con f igu r atio n 3.6-1-2 System Configuration In t h is f unctio n all o w m odi f y ing the S T P s y s t e m con f iguration Ø Select< Edi[...]

22 3.6-1-4 Previous Me n u Return t o pr e vious m enu 3.6-2 SNM P Configuration T his sub- m enu con t ains f our ite m s, w hich is Syste m Options, Communit y S trings, T rap managers a nd Pre v ious M enu 3.6-2-1 System Opti o ns In t h is f unctio n all o w to in p ut Na m e, Con t act a n d Loc a tion Ø Select <Edit> to in p ut n a m e[...]

23 3.6-2-2 Community St rings In t h is f unctio n all o w a d d co m m uni t y na m e Ø Select “ A dd ” to e nter int o “ A dd SN M P community ” screen, th e n press Edit Ø After in p ut t h e co m m uni t y n a m e use TAB ke y t o m ove to t h e Write a c ce s s m ode Ø Use the Sp ace ke y t o ch an ge t h e access m ode Ø After set[...]

24 3.6-3-1 W orking Ports In t h is f unctio n all o w to se t LAC P port s t a t e activi t y o f each p ort Ø Select <Edit> Ø Press Sp ace ke y t o e n a b le or disa b l e LAC P su p port Ø After c o m plete se t up press ESC g o es bac k to acti o n m enu Ø Press <Sa v e> t o s a ve t he c on f igura t i o n 3.6-3-2 S tate Activ[...]

25 3.6-3-3 Group S tatus Displ a y the LAC P gr o u p s s t atus 3.6-3-4 P r evio u s Menu Return t o pr e vious m enu 3.6-4 IGMP/GVR P C o nfiguration In t h is f unctio n all o w y o u to en a bl e or d isa b le IG M P/ G VRP Ø Select <Edit> Ø Use Sp ace ke y t o ch a nge val u e Ø After c o m plete se t up press ESC g o es bac k to acti[...]

26 3.6-5-1 802.1x Setu p In t h is f unctio n all o w y o u to en a bl e IEEE8 0 2.1x Ø Select <Edit> Ø Use Sp ace ke y t o e na b le o r disa b le 802 . 1x Ø After c o m plete se t up press ESC g o es bac k to acti o n m enu Ø Press <Sa v e> t o s a ve t he c on f igura t i o n Note: Pl e ase be sure t h e RADI U S server is correc[...]

27 Note: Please c h ec k w i t h t h e n et w or k ad m inistrator ab out t he p ara m eter settings, or th e switc h clie n t m a y f ail e d in g e tting connect e d d u e t o th e in c orrect p ara m eters. 3.6-5-3 Per Port Setting In t h is f unctio n all o w y o u to chan g e 8 0 2.1x a ut h en t ication o f each port Ø Select <Edit> Ø[...]

28 3.6-5-5 Previous Me n u Return t o pr e vious m enu 3.7 Syste m Rese t Configuration T his sub- m enu con t a ins f our i t e m s, w hic h is F a c t or y D efault, S y ste m R e boot, T F T P Configuration an d Pre v ious M enu 3.7-1 F actory Defa u lt In t h is f unctio n all o w y o u to reset th e switch t o t h e f acto r y d e f ault m ode[...]

29 3.7-2 Syste m Reboot Provi d e res t art s w itch 3.7-3 TFT P Configuration T his sub- m enu con t ains f our ite m s U p date firm w are , R e stor e configurat i on, backu p configuration a n d Pre v ious menu 3.7-3-1 Update Firmware In t h is f unctio n all o w y o u to use T F T P to upda t e f ir m w are Ø Select <Edit> to in p ut t [...]

30 3.7-3-2 R estore Configuration In t h is f unctio n all o w y o u to restore f ile f ro m T F T P server Ø Select <Edit> to in p ut t he TF T P Server I P a nd R estor e f ile n a m e Ø After c o m plete se t up press ESC g o es bac k to acti o n m enu Ø Press <Sa v e> t o s a ve t he c on f igura t i o n 3.7-3-3 B ackup Configura[...]

31 Chapter 4 WEB M A N A G E M ENT W S W -2401 is support web m anage m ent there f ore in t his secti o n w ill in t roduce t he con f igura t ion an d f unctions o f the w e b-base d m anag e m ent. Be f ore t o use web m ana ge m ent, pleas e setu p t h e I P Address with th e cons o le p ort (RS- 2 32) and use t his IP a d dress to c on f igur [...]

32 4.2 Por t S tatus T his section is p r ovid e det a il s t a t us o f each p ort f r o m W S W -2401 Ø Link: in d icate t he port s t a tu s. U P m eans the d e vice is connec t ed to t he p ort D o w n m eans the d evice is not c o nnec t e d to t h e p ort Ø St ate: displ a y th e s t atus o f each p ort. Ø Negotiation: dis p l a y a uto - [...]

33 Ø Pri o ri t y : d ispl a y t he priori t y s t atus o f each p ort Ø Sec u ri t y : d ispl a y the port s ecuri t y is o n or off Ø Config: displ a y t he curr e nt con f igura t ion o f each p ort . Ø A ct u al: dis p l a y t he curre n t s t ate o f each port o n W GSD-1020. 4.3 Por t S ta t istic s T his f unction is pr o vides th e deta[...]

34 4.4-1 I P Configuration T his section a ll o w s m odi f y t he DCHP Cli e nt, IP Addre s s, Su b net m as k and Gat ewa y . After m odi f y th e DHC P c li e nt, IP Address, Sub n et m as k and Gat e w a y , clic k A pp ly . Clic k S y ste m reboot. W S W -24 0 1 w ill r e b o ot t o t a k e e f f ect for the n e w se t ti n g.[...]

35 4.4-2 Switch Settings T his section is p r ovid e ba s ic in f or m ation and all o w s m odi f y t he s witch set t ing 4.4-2-1 B asic Ø S y ste m Na m e: th e na m e of s w itch Ø S y ste m Location: t h e s w i t ch p h y s ical loca t i o n. Ø S y ste m D e scription: t he d escripti o n o f switch Ø Firm w are V ersion: t h e s w itch c[...]

36 4.4-2-2 Advanced T here are t w o sec t io n in c l u des i n A d vanc e d set t ing w h ich is D i sabl e M A C A d d r e ss A ging out and Priori t y Queue S e r v ice After set u p co m plete clic k A pp l y b utt o n. Disabl e M A C A d d r e ss A g i ng out Ø A g e-out Time: the n u m ber o f seconds tha t an i n activ e MA C a d dress re [...]

37 4.4-2-3 Misc Config Ø Collisions Retry Fore v er: disa b le is i n h a l f du p lex. I f hap p en c o llisi o n will ret r y 4 8 ti m es and t he n dro p f r a m e. Ena b le is in h al f du p lex. I f h a pp e n collision will ret r y f oreve r Ø Hash A lgorithm: CRC H ash or Di r ect M a p f or MA C a d dress lear n in g algorith m Ø IFG Com[...]

38 4.4-4 Port Controls T his section is intr o duces d e t ail s t atus o f each port on W S W -2401 Ø St ate: user can e n a b le or d isable an y port Ø Negotiation: user can set auto or f orce m ode. Ø S peed: set sp e ed o f ea c h port Ø Duplex: a ll o w to s et f ull or hal f d u plex m ode Ø Flo w Control: provide on o r o f f f low con[...]

39 each p ort Ø Pri o ri t y: a ll o w to s e t h igh , l o w a n d d isa b le p r iori t y f un c tion Ø Sec u ri t y: all o w user to en a ble secu r i t y f uncti o n. W hen this f unction is en a bli n g, t h e port will loc k ed with o ut per m iss i on o f a d dress lear n i n g. Ø After setup co m plete, c lic k A p p ly b u tton 4.4-5 T [...]

40 4.4-5-2 Aggregator Information Provi d e t h e Agg r ega t or Se t tin g in f or m ation 4.4-5-3 S tate Activity After y ou s etu p LAC P A g grega t o r , y o u can con f i g ure p ort s t ate ac t ivi t y Ø A cti v e (e n able): . T he port auto m aticall y s ends L AC P protocol p ac k e t s Ø P assive (not enable act i ve): t he p ort d o [...]

41 4.4-6 Forwarding an d Filtering W S W -2401 is sup p ort I P m ulticast and all o w s e na b l e IGM P Pr o toc o l o n Switch s etting advan t a ge d p a g e f ro m w e b in t er f ace. 4.4-6-1 IGM P Snooping Ø Select e n a b le on IG M P Pr o tocol Ø After setup co m plete c lic k A p p ly b u tton 4.4-6-2 S tatic MAC Addresses T his section[...]

42 Ø In V L A N ID t y p e a V L AN I D Ø Clic k A pp l y but t on t o t a k e e f f ect Ø Use Dele t e b u tto n to delet e u n w a nt e d M AC A d dress 4.4-6-3 MAC Filteri n g T his section a ll o w user t o b loc k unwant e d traf f ic Ø In M A C A ddr e ss c o lu m n enter M A C A d dress tha t w a n t to f il t er Ø In V L A N ID t y p e[...]

43 Ø Select 8 0 2.1Q m ode f ro m V L A N Op e ration M ode Ø Clic k the E n able G VR P Protocol box to en a ble Ø Clic k A dd b utt o n to cr e ate n e w V L AN gr o up Ø Ty p e a na m e f or ne w V L A N and V L AN I D Ø Choose a P r otoc o l t y pe Ø Fr o m the a vail a ble por t s bo x, select p or t s to a d d t o th e S w itc h a n d c[...]

44 4.4-7-2 Port-based V L AN Ø Select 8 0 2.1Q m ode f ro m V L A N Op e ration M ode Ø Clic k A dd b utt o n to cr e ate n e w V L AN gr o up Ø Ty p e a na m e f or ne w V L A N and V L AN I D Ø Fr o m the a vail a ble por t s bo x, select p or t s to a d d t o th e S w itc h a n d clic k A dd Ø Clic k A pp ly but t on after co m pete setup 4[...]

45 port Ø Ingres s Filtering: Ingress f il t eri n g le t s f r a m es belon g i n g to a speci f ic VLA N to be f or w ard e d i f th e port b e lo ng s to tha t VLA N . T he user all o w to en a ble or d isa b le t hi s f unction Ø A c cep t able F ra m e T y pe: all o w user to s e lect d if f ere n t f r a m e t y pe which is A ll or T ag onl[...]

46 4.4-8-2 Per Port configuration Ø Y o u can vi e w s p a n n ing tre e s t atus a b out s witch Ø Select t h e por t i n Port col u m n. Ø Assign t he Pa t h Cost. T he v a lue r a n g e is f ro m 1 to 6 5 535. Ø Assign t he port p r iori t y v a l u e. T he value r a ng e is f ro m 0 to 255. T he l o w est v a lu e has hi g her priori t y . [...]

47 Ø Port M irroring St ate: pr o vide d isa b le, RX, T X and Bo t h port Mirroring f unction Ø A nal y s i s Port: all o w seei n g all m onitor p ort traf f ic. Y o u can co n nect m irror port t o LAN an a lyzer or netxr a y Ø M onitor Port: the por t s th a t y o u w a nt t o m onito r . 4.4-10 SNM P Management All o w t o m anage m ent th [...]

48 S y ste m Options Ø Name : enter the s y s te m na m e f or this switch Ø Location: enter t h e locati o n f or this s w itch Ø Con t act: enter t h e n a m e of con t act p erson or co m p an y Ø Clic k A pp l y but t on after f inish setup Community strings Ø S tring: f ill t he n a m e o f string Ø RO/ Read On l y: . E n a ble r e ques [...]

49 Ø Inpu t th e n e w user n a m e. Ø Inpu t th e n e w p as s w ord. Ø Re-i n put t he n e w passwor d . Ø Clic k “ A p ply ” b u tto n to m odi f y 4.4-12 802.1x config u ration T his section y o u c a n e na b le a n d con f igu r e t h e p ara m eters o f 802.1x f unction 4.4-12 - 1 System Configuration . Ø Radius Ser ve r IP: se t th[...]

50 Radius Server Ø Shared K e y: s e t a n enc r y p tio n ke y f or use during a ut h entic a ti o n sessions wi t h t he speci f ied r a dius se r ve r . Ø N A S, I d entifier: set the i de nti f ier f or the r a dius client . Ø Clic k A pp ly but t on 4.4-12 - 2 Pe r Port Configuration Ø Select por t colu m n Ø Select t h e s t ate o f port[...]

51 Ø Quiet P e riod: used t o d e f ine p eri o ds o f ti m e during w hich it will n o t at t e m pt to a c quire a supplicant( D e f ault t i m e is 6 0 seconds). Ø T x Period: use d to deter m ine w h en an EAPO L PDU is to b e trans m itted(De f a u lt val u e is 30 seco n ds). Ø Supplicant Timeout: used to d eter m ine ti m eout co n dition[...]

52 4.4-14 Configuration Backup T his section a ll o w user t o R estore a n d Bac k up int o W S W -2401 4.4-14 - 1 TFT P Resto r e Configuration Ø T F T P Ser v er I P A ddress: enter t he IP a d dress o f T FT P server Ø Restore F ile N ame: e n ter the f ile na m e that wa n t to r estore Ø Clic k A pp ly but t on 4.4-14 - 2 TFT P Back u p Co[...]

53 4.4-15 Factory Default T his f unction pr o vides rese t the S w itch to f acto r y de f a u lt m ode 4.4-16 System Rebo o t T his f unction pr o vides re bo ot t h e W S W -2401[...]

54 Chapter 5 TROUBLESHOOTING T his chapter con t a ins so m e in f or m ation to help y ou to solve m ost c o m m and proble m s on the W S W -2401 T he LED is not lit Solution Chec k the cable con n ecti o n Port c annot communicat i on to other s t ations loca t ed on other port Solution Pl e ase chec k VLAN, a nd p ort T run k f unction, which m[...]

55 Chapter 6 TECHNI C A L SP E CIFI C A TION M odel WSW2401 Por t s 24 1 0/1 0 0Base- T X RJ-45 Auto-MD I /MDI-X por t s 1 o p en slot 1 RS- 2 32 D B-9 m ale Di m ensions 440 m m ( W )*225 mm (D)*44.5 mm (H) 1U h e i g ht W e ight 3 k g P o w er Re q uire m ent 100- 2 40 V AC 50-6 0H z S w itc h archi t ecture S tore- a nd- f orward, Bac k -plane 8[...]

56 A PP ENDIX A A.1 S w itch ‘ s RJ- 4 5 Pi n As s ignments 100 0 M b ps, 1 0 00Base T Con t act MDI MDI-X 1 BI_DA+ BI_DB+ 2 BI_DA- BI_DB- 3 BI_DB+ BI_DA+ 4 BI_DC+ BI_DD+ 5 BI_DC- BI_DD- 6 BI_DB- BI_DA- 7 BI_DD+ BI_DC+ 8 BI_DD- BI_DC- I m plicit i m ple m en t ati o n o f t he crossover f uncti o n wit h in a t w is t ed- p a ir ca b le , or a t [...]

57 A PP ENDIX B W S W -2401 is with IEEE8 0 2.1x a u th e ntica t i o n ca p a bili t y , b e f ore y o u tu r n o n th e 8 02.1x f unction, t he f oll o win g sections sh o w s t h e re q uir e d e nviron m ent f or 802. 1 . Section B.1 describes t he in f rastructure o f the IEEE8 0 2.1x Section B.2 describes h o w to set u p t h e IEEE8 0 2.1x s[...]

58 3. Clic k on “ A dd/ R emo v e Windo w s components ” . 4. C h ec k “ Certificate S e r v ices ” , a nd clic k “ Next ” to conti n ue. 5.S e lect “ Enterprise root CA ” , an d clic k “ Next ” to c o nti n ue. 6. Enter t he in f or m ation t ha t y o u want f or y our Certi f ic a te Service, a nd c lic k “ Next ” to con t[...]

59 10. Select “ A uthenti c ated Se s sion ” and “ Smar t card Logon ” b y h olding d o wn to the Ctrl ke y , and clic k “ OK ” to contin u e . 11. Go to S tart > Pro g r a m > A dministr a ti v e T ools > A cti v e Director y Users and Computers . 12. R i g ht-click on d o ma i n, an d select ” Prop e rti es ” to co n tinu[...]

60 13. Select “ Group Pol icy ” t ab a nd clic k “ Properties ” t o con t in u e. 14. Go t o “ Computer Configuration ” > “ Securi t y Settings ” > “ Publ i c K e y P o lic ies ” 15. R ig h t-clic k “ A utomat i c Certifica t e Requ e st Setting ” , and s e lect “ New ” 16. C lic k “ A utomatic C erti f icate R e[...]

61 17. T he Auto m atic Certi f ic a te R e quest Se t up W i z ar d will g u i d e y o u t hro u gh t he A u to m atic Certi f icate R e q uest set u p, si m pl y clic k “ Next ” throug h to t h e last step. 18. C lic k “ Finish ” to co m plete t he Auto m atic Cer t i f ica t e Re q uest Se t up 19. Go t o Start > Run , and t y p e “[...]

62 Adding Internet Authenti c ation S e rvi c e 21. Go t o Start > Control Pane l > A dd o r R emo v e Program s . 22. Select “ A dd/Remo v e Windo w s Components ” f ro m the pan e l o n t h e le f t. 23. Select “ Internet A uth e ntication S e r v ice ” , a nd clic k “ OK ” to install Setting Internet Authenti c ation S e rvi c [...]

63 26. Enter the I P a d dress o f W S W -2401 in the C l ient a d dress t ext f ield, a m e m orable na m e f or W S W -2401 in t he C lient-Vendor text f i e ld, t he access password us e d b y W S W - 2 401 in t he Shared s e cret text f ield. R e- t y p e t h e pas s w or d i n th e Confirmed sh a red se c ret text f iel d . 27. C lic k “ Fin[...]

64 29. Select “ Ne w Remote A cce s s P o li cy ” 30. Select “ D a y - A nd- T ime-Restr i ction ” , an d clic k “ A dd ” to con t in u e. 31. U nless y ou wan t to s pe ci f y t he active d ura t ion f or 8 02.1X a uth e n t ication, clic k “ OK ” to accept f or havi n g 8 02.1x a uth e ntica t i o n e n a b le d at all ti m es.[...]

65 32. Select “ Grant remote a cce s s p e rmi s sion ” , a n d clic k “ Next ” to contin u e. 33. C lic k “ Edit Profile ” .[...]

66 For M D 5 Authentication Setup (Steps 3 4 ~ 3 5 ) 34. Select “ A uthentication ” T ab. 35. En a ble “ Exte n sible A u thentication Protocol ” . S e lect “ M D5-Challenge ” a n d ena b le “ Encr y pted A ut h enticati o n (C H A P) ” f or M D5 aut h en t ication. C lic k “ OK ” 36. Select “ Internet A uth e ntication S e r [...]

67 clic k “ Register Ser v ice i n A cti v e D ir e ctory ” . 37. Go t o Start > Progr a m > A dmin i strati v e T ools > A cti v e D ir e ctor y Us e rs and Computers. 38. R ig h t clic k on t h e do m ain, and s e lect “ Prop e rties ” 39. Select “ Group Pol icy ” t ab, a nd clic k “ Edit ” to edi t t he Grou p Polic[...]

68 40. Go t o “ Computer Configuration ” > “ Windo w s Settings ” > “ S e curi t y Sett i ngs ” > “ A c count Polic i es ” > “ P a ss w ord Polic i es ” . D o u b le clic k on “ Store p a ss w ord using re v ersib l e e n cr y ption for all us e rs in the domain ” .[...]

69 41. C lic k “ Define this poli c y setting ” , select “ Enab l ed ” , and clic k “ OK ” to conti nu e 42. Go t o Start > Progr a m > A dmin i strati v e T ools > A cti v e D ir e ctor y Us e rs and Computers . 43. Go to Us e rs . R i g ht-cli ck on the user that y o u are g ranti n g access, and s e lect “ Prop e rties ”[...]

70 46. Go t o t h e “ Di a l-in ” tab, and c h ec k “ A llo w ac c ess ” option f or Re m ote Access Per m ission and “ No C all-ba ck ” f or Callbac k Options. T hen clic k “ OK ” .[...]

71 B.3 S w itc h client setup W indo w s X P is ori g i n all y 8 0 2.1X sup p ort. As to ot h er o perating s y s t e m s ( w in do w s 98SE, ME, 2000), an 80 2 .1X client utili t y is ne e de d . T he f oll o wing procedures sh o w ho w t o c o n f igure 802 . 1X Auth e n t ication in W i nd o w s XP B.3.1 E A P-MD5 A u t h entication 1. Go t o S[...]

72 4. Select on the “ A uthen t ication ” tab. 5. Select “ Enab l e net w ork a c ce s s control u sing IEEE 80 2 .1X ” to e na b le 8 0 2 . 1x aut h en t ication. 6 Select “ M D-5 Challenge ” f ro m the drop-d o wn list b ox f or EAP t y p e.[...]

73 7 Clic k “ OK ” 8 W h en S w itch c lient has associat e d with W S W -2401, a user aut h en t ica t ion no t ice a ppears in s y s t e m tr a y . Clic k on the notic e to c o ntinue an d g e t t he a uth e ntic a ti o n f ro m y ou r W indo w s 20 0 0 server.[...]