D-Link DWS-3160-24TC Reference Manual page 497

DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide
Attribute-Specific Field
If the user has configured the ACL attribute of the RADIUS server (for example, ACL profile: create
access_profile profile_id 6 profile_name 1 ethernet; ACL rule: config access_profile profile_id 6 add
access_id auto_assign ethernet), and the 802.1X or MAC-based Access Control or WAC authentication is
successful, the device will assign the ACL profiles and rules according to the RADIUS server. For more information
about the ACL module, please refer to the 'Access Control List (ACL) Command List' chapter.
AP RADIUS Attributes
Since an AP configuration is determined by its physical MAC address, the administrator adds a RADIUS entry for
each AP with the User-Name attribute set to the MAC address. The following table indicates the attributes that are
configured in the RADIUS server entry. The vendor specific attributes are added using the D-Link vendor ID (171).
Attribute
User-Name (1)
User-Password (2)
Vendor-Specific (26),
D-Link (171),
Location (101)
Vendor-Specifc (26),
D-Link (171),
Mode (102)
Vendor-Specifc (26),
D-Link (171),
Profile-ID (103)
Vendor-Specifc (26),
D-Link (171),
Switch-IP (104)
Vendor-Specifc (26),
D-Link (171),
Radio-1-Chan (105)
Vendor-Specifc (26),
D-Link (171),
Radio-2-Chan (106)
Vendor-Specifc (26),
D-Link (171),
Used to assign the ACL
profile or rule.
Description
Ethernet Address of the AP.
A fixed password used to
lookup an AP entry.
A description for the AP,
often based on its location.
Indicates whether this AP is
managed by the Switch, by
an administrator, or is a
rogue AP.
If AP is managed by a
Switch, the ID of the
configuration profile for this
AP.
If there is more than one
WS using this RADIUS
server, indicates the IP
address of the WS to
managed this AP.
Indicates a fixed channel for
the radio.
Indicates a fixed channel for
the radio.
Indicates a fixed power
setting for the radio.
ACL Command
For example:
ACL profile: create access_profile profile_id 6
profile_name 1 ethernet vlan 0xFFF;
ACL rule: config access_profile profile_id 6
add access_id auto_assign ethernet vlan_id 1
port all deny;
Range
Valid Ethernet MAC
Address.
8-63 characters, default
"NOPASSWORD"
0-32 characters
Managed (1),
Standalone (2),
Rogue (3)
1-16
Valid IP Address
0, 1-13, 36, 40, 44, 48,
52,56, 60, 64, 104, 108,
112,116, 120, 124, 128,
132,140, 149, 153, 157,
161,165. 0 indicates
automatic channel
assignment.
0, 1-13, 36, 40, 44, 48,
52,56, 60, 64, 104, 108,
112,116, 120, 124, 128,
132,140, 149, 153, 157,
161,165. 0 indicates
automatic channel
assignment.
0, 1-100 percent 0
indicates automatic
492
Required
Usage Default
Required None
Required None
Optional ""
Required None
Required if None
mode is WS-
Managed.
Optional None
Optional, if 0
defined and
valid will
override auto
channel
configuration
Optional, if 0
defined and
valid will
override auto
channel
configuration.
Optional, if 0
defined and