D-Link DWS-3160-24TC Reference Manual page 496

DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide
Tunnel-Type
Tunnel-Medium-Type
Tunnel-Private-Group-ID
A summary of the Tunnel-Private-Group-ID Attribute format is shown below.
0
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The table below shows the definition of Tag field (different with RFC 2868):
Tag field value
0x01
0x02
Others
(0x00, 0x03 ~ 0x1F, >0x1F)
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the 802.1X, or
MAC-based Access Control authentication is successful, the port will be added to VLAN 3. However, if the user
does not configure the VLAN attribute and authenticates successfully, the port will be kept in its original VLAN. If
the VLAN attribute configured on the RADIUS server does not exist, the port will not be assigned to the requested
VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS Server. The table
below shows the parameters for an ACL. The RADIUS ACL assignment is only used in MAC-based Access Control.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute Description
Vendor-ID
Vendor-Type
This attribute indicates the tunneling protocol(s) to be
used (in the case of a tunnel initiator) or the tunneling
protocol in use (in the case of a tunnel terminatior).
This attribute indicates the transport medium being
used.
This attribute indicates group ID for a particular
tunneled session.
1
| Length |
String field format
VLAN name (ASCII)
VLAN ID (ASCII)
1. When the switch receives the VLAN
setting string, it will think it is the VLAN ID
first. In other words, the switch will check all
existed VLAN ID and check if there is one
matched.
2. If the switch can find one matched, it will
move to that VLAN.
3. If the switch can not find the matched
VLAN ID, it will think the VLAN setting string
as a "VLAN Name".
4. Then it will check that it can find out a
matched VLAN Name.
Defines the vendor.
Defines the attribute.
2
Tag | String...
Value
171 (DLINK)
12 (for ACL profile)
13 (for ACL rule)
491
13 (VLAN) Required
6 (802) Required
A string (VID) Required
3
Note
A tag field of greater than 0x1F
is interpreted as the first octet of
the following field.
Usage
Required
Required