9.2.3.8. D-Link

9.2.3.8.1. DGS3100 and DGS3200

Firmware: Generic

Administration Portal > ON CMDB > Network Devices Brand/Model: Generic/Generic

OpenNAC Enterprise supports D-Link switches without VoIP using two different trap types:

• linkUp/linkDown

• MAC Notification

We recommend to enable linkUp/linkDown and MAC notification together.

Important

Don’t forget to update the startup config!

Enable MAC notification:

enable mac_notification
config mac_notification interval 1 historysize 1
config mac_notification ports 1:1-1:24 enable

Enable linkup/linkdown notification:

enable snmp traps
enable snmp linkchange_traps

Add SNMP host:

create snmp host <opennac-ip> v2c  public

Enable MAC base access control: .. code:

enable mac_based_access_control
config mac_based_access_control authorization attributes radius enable local disable
config mac_based_access_control method radius
config mac_based_access_control password <Radius_Shared_Key>
config mac_based_access_control password_type manual_string
config mac_based_access_control max_users no_limit
config mac_based_access_control trap state enable
config mac_based_access_control log state enable

On each interface:

config mac_based_access_control ports 1:1 state enable
config mac_based_access_control ports 1:1 max_users 128
config mac_based_access_control ports 1:1 aging_time 1440
config mac_based_access_control ports 1:1 block_time 300
config mac_based_access_control ports 1:1 mode host_based