D-Link DWS-3160-24TC Reference Manual page 498

DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide
Radio-1-Power (107)
Vendor-Specifc (26),
D-Link (171),
Radio-2-Power (108)
Vendor-Specifc (26),
D-Link (171),
Expected-Channel (112)
Vendor-Specifc (26),
D-Link (171),
Expected-AP-Security
(110)
Vendor-Specifc (26),
D-Link (171),
Expected-SSID (109)
Vendor-Specifc (26),
D-Link (171),
Allowed-On-Wired-
Network (113)
Client 802.1X RADIUS Attributes
An Access Point can use 802.1X authentication via the RADIUS to allow or prohibit access to the wireless network
for specific users on client stations. Wireless Client QoS parameters can be obtained if (and only if) 802.1X
authentication is used, which is based on user name and password identification credentials. Each of the QoS
parameters defined here are optional, meaning they may not be present in the client's RADIUS server entry even
though a valid 802.1X authentication occurs for the client. Assuming a wireless client successfully authenticates
using 802.1X, each QoS RADIUS attribute that exists for the client will be sent to the AP for processing.
In all other cases, either 802.1X authentication is not used, is used but is not successful, or is successful but a
particular QoS RADIUS attribute is either not configured or not valid for the client entry. The corresponding AP
network client QoS default parameter is used instead for the client. Each such RADIUS attribute is evaluated this
way, case-by-case.
Attribute
Vendor-Specific (26),
D-Link (171),
Client-ACL-Dn (120)
Vendor-Specific (26),
D-Link (171),
Indicates a fixed power
setting for the radio.
The expected channel for a
stand-alone AP.
The expected security mode
for a stand-alone AP.
The expected SSID for a
standalone AP.
Flag indicating whether this
stand-alone AP is allowed
on the wired network.
Description
Access list identifier to be applied to 802.1X
authenticated wireless client traffic in the
outbound (down) direction. If this attribute is
not present then the Client QoS Default ACL
Down Type and Name parameters defined in
the Network configuration are used instead. If
this attribute is present but refers to an
undefined access list name in the system, all
packets for this client will be dropped until the
ACL is defined.
Access list identifier to be applied to 802.1X
authenticated wireless client traffic in the
power assignment.
0, 1-100 percent 0
indicates automatic
power assignment.
0, 1-165. 0 indicates that
this AP can operate on
any channel.
0 - Any Mode
1 - Open
2 - WEP
3 - WPA or WPA2
Character string, 0 to 32
bytes. If string is empty,
then device may use any
SSID
0 - AP is allowed on the
wired network.
1 - AP is not allowed on
the wired network.
493
valid will
override auto
power
configuration.
Optional, if
defined and
valid wil
override auto
power
configuration.
Optional
Optional
Optional
Optional
Range
Type: string 5-36
characters (not null-
terminated) The
string is of the form
"type:name" where:
• type = ACL type
identifier: IPV4,
IPV6, MAC
• : = required
separator character
• name = 1-31
alphanumeric
characters,
specifying the ACL
number (IPV4) or
name (IPV6, MAC)
Type: string 5-36
characters (not null-
0
0
0
""
0
Usage
Optional
Optional