AS User-Side Service

Procedure

1. Choose Configuration > SVF Quick Config > AS User-Side Service. The AS User-Side Service page is displayed.

2. Click Create.
3. In the displayed Add AS Port Group dialog box, set AS port group name.

4. Click OK.
5. Click the List of Member Ports tab to add member ports.
   1. Click Add.
   2. Select the AS name on the Add AS Port page.

   3. Click Add All or Add Selected to add AS ports as required.
   4. Click Back after completing the configuration.
6. Click the Service Configuration tab to configure services.

   Table 1 Icons on the Service Configuration tab

   Icon	Description
   	Select: allows you to select parameter.
   	Create: allows you to configure parameters.
   	Modify: allows you to modify parameters.
   	Delete: allows you to delete currently configured parameters.

   • Set Connection type to User-defined.
     1. Click next to Default VLAN. The Add VLAN and Gateway Configuration dialog box is displayed.
        Table 2 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

        Table 2 Parameters in the Add VLAN and Gateway Configuration dialog box

        Item	Description
        VLAN ID	Indicates a VLAN ID. The value ranges from 1 to 4094.
        Gateway location	Sets Gateway location to Parent or Other.
        VLANIF (IP/mask)	Specifies the IP address and mask of the gateway.
        ARP proxy on default VLANIF	Indicates whether to enable ARP proxy on a VLANIF interface: ON: Enable ARP proxy. OFF: Disable ARP proxy. NOTE: In centralized forwarding, ARP proxy must be enabled on a VLANIF interface.
        User IP allocated by	Specifies the user IP address allocation mode: Parent Remote server
        Remote server address	Specifies the IP address of a remote server. After setting an IP address, click to add it to the following list. NOTE: This parameter is displayed when User IP allocated by is set to Remote server.

     2. Configure the parameters and click OK.
     3. Click next to Voice VLAN. The Add VLAN and Gateway Configuration dialog box is displayed,

        Table 2 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

     4. Configure the parameters and click OK.
     5. Enter a VLAN ID for transparent transmission.
     6. Click next to Network Enhanced Profile. The Add Network Enhanced Profile dialog box is displayed.
        Table 3 describes the parameters in the Add Network Enhanced Profile dialog box.

        Table 3 Parameters in the Add Enhanced Service Profile dialog box

        Item	Description
        Profile name	Specifies the enhanced service template name.
        Port group authentication	Specifies the port group authentication status: Enabled Disabled
        Unicast suppression (pps)	Sets the maximum unknown unicast traffic allowed on an interface. The value ranges from 0 to 1488100.
        Broadcast suppression (pps)	Sets the maximum broadcast traffic allowed on an interface. The value ranges from 0 to 1488100.
        Multicast suppression (pps)	Sets the maximum multicast traffic allowed on an interface. The value ranges from 0 to 1488100.
        All traffic suppression (kbps)	Sets the maximum traffic allowed on an interface. The value ranges from 64 to 10000000.
        DHCP Snooping	Indicates whether to enable DHCP snooping: ON: Enable DHCP snooping. OFF: Disable DHCP snooping.
        IPSG	Indicates whether to enable IP source guard: ON: Enable IP source guard. OFF: Disable IP source guard.
        DAI	Indicates whether to enable ARP inspection: ON: Enable ARP inspection. OFF: Disable ARP inspection.
        Edge Port	Indicates whether to enable the edge port function on an interface: ON: Enable the edge port function. OFF: Disable the edge port function.
        Priority Trust	Indicates whether to configure the priority trust function on an interface: ON: Enable the priority trust function. OFF: Disable the priority trust function.

     7. Configure the parameters and click OK.
     8. Click next to User Access Profile. The Add User Access Profile dialog box is displayed.
        • Set User authentication to Non-authentication.
          Table 4 describes the parameters on the page.

          Table 4 Creating a user access profile: non-authentication

          Item	Description
          Profile name	Specifies the name of a user access control template.
          Access user limit	Sets the maximum number of access users. The value ranges from 0 to 4096.
          ARP packet rate limit (kbps)	Sets the rate limit of incoming ARP packets on an interface. The value ranges from 8 to 128.
          DHCP packet rate limit (kbps)	Sets the rate limit of incoming DHCP packets on an interface. The value ranges from 8 to 128.

        • Set User authentication to Local authentication.
          Table 5 describes the parameters on the page.

          Table 5 Creating a user access profile: local authentication

          Item	Description
          Profile name	Specifies the name of a user access control template.
          Access user limit	Sets the maximum number of access users. The value ranges from 1 to 512.
          User Name	Creates the local user name.
          Password	Creates the local password.
          Confirm password	Confirms the local password.
          Access mode	Sets the user access authentication mode. You can select one or multiple of the following authentication modes: MAC: MAC address authentication 802.1X: 802.1x authentication Portal: Portal authentication
          Portal Server When Access mode includes Portal, the following parameters are valid:
          Portal server name	Specifies the name of a Portal server template.
          URL	Sets a URL for a Portal server. The URL identifies the Portal server's website that can be visited by Portal authentication users.
          Portal server IP	Configures an IP address for the Portal server.
          Port number	Configures a destination port number for the device to send packets to the Portal server. The value is an integer that ranges from 1 to 65535.
          Shared key	Configures a shared key used by the device to exchange information with the Portal server. The value is a string of 1 to 16 characters.
          Confirm shared key	Confirms the shared key used by the device to exchange information with the Portal server.

        • Set User authentication to RADIUS authentication.
          Table 6 describes the parameters on the page.

          Table 6 Creating a user access profile: remote RADIUS authentication

          Item	Description
          Profile name	Specifies the name of a user access control template.
          Access user limit	Sets the maximum number of access users. The value ranges from 1 to 512.
          Server IP	Specifies the IP address of a RADIUS authentication server.
          Port number	Specifies the port number of the RADIUS authentication server. The value is an integer that ranges from 1 to 65535.
          Shared key	Specifies the RADIUS shared key. The value is a string of 1 to 128 characters.
          Confirm shared key	Configures the RADIUS shared key.
          Access mode	Sets the user access authentication mode. You can select one or multiple of the following authentication modes: MAC: MAC address authentication 802.1X: 802.1x authentication Portal: Portal authentication
          Portal Server When Access mode includes Portal, the following parameters are valid:
          Portal server name	Specifies the name of a Portal server template.
          URL	Sets a URL for a Portal server. The URL identifies the Portal server's website that can be visited by Portal authentication users.
          Portal server IP	Configures an IP address for the Portal server. NOTE: Multiple IP addresses can be specified for the portal server. For the operation method, seeExternal Portal Server.
          Port number	Configures a destination port number for the device to send packets to the Portal server. The value is an integer that ranges from 1 to 65535.
          Shared key	Configures a shared key used by the device to exchange information with the Portal server. The value is a string of 1 to 16 characters.
          Confirm shared key	Confirms the shared key used by the device to exchange information with the Portal server.

     9. Configure the parameters and click OK.
     10. Click Apply to complete the configuration.
   • Set Connection type to Connect to PC.
     1. Click next to Default VLAN. The Add VLAN and Gateway Configuration dialog box is displayed,

        Table 2 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

     2. Configure the parameters and click OK.
     3. Click next to Network Enhanced Profile. The Add Network Enhanced Profile dialog box is displayed.

        Table 3 describes the parameters in the Add Network Enhanced Profile dialog box.

     4. Configure the parameters and click OK.
     5. Click next to User Access Profile. The Add User Access Profile dialog box is displayed.

        Table 4, Table 5, or Table 6 describes the parameters on the page.

     6. Configure the parameters and click OK.
     7. Click Apply to complete the configuration.
   • Set Connection type to Connect to IP Phone.
     1. Click next to Default VLAN. The Add VLAN and Gateway Configuration dialog box is displayed,

        Table 2 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

     2. Configure the parameters and click OK.
     3. Click next to Voice VLAN. The Add VLAN and Gateway Configuration dialog box is displayed,

        Table 2 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

     4. Configure the parameters and click OK.
     5. Click next to Network Enhanced Profile. The Add Network Enhanced Profile dialog box is displayed.

        Table 3 describes the parameters in the Add Network Enhanced Profile dialog box.

     6. Configure the parameters and click OK.
     7. Click next to User Access Profile. The Add User Access Profile dialog box is displayed.

        Table 4, Table 5, or Table 6 describes the parameters on the page.

     8. Configure the parameters and click OK.
     9. Click Apply to complete the configuration.