D-Link xStack Reference Manual page 271

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch WEB UI Reference Guide
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the 802.1X, or
MAC-based Access Control authentication is successful, the port will be added to VLAN 3. However, if the user does
not configure the VLAN attribute and authenticates successfully, the port will be kept in its original VLAN. If the VLAN
attribute configured on the RADIUS server does not exist, the port will not be assigned to the requested VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS Server. The table
below shows the parameters for an ACL. The RADIUS ACL assignment is only used in MAC-based Access Control.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute
Vendor-ID
Vendor-Type
Attribute-Specific Field
If the user has configured the ACL attribute of the RADIUS server (for example, ACL profile: create access_profile
ethernet vlan 0xFFF profile_id 100; ACL rule: config access_profile profile_id 100 add access_id auto_assign
ethernet), and the MAC-based Access Cotntrol authentication is successful, the device will assign the ACL profiles
and rules according to the RADIUS server. For more information about the ACL module, please refer to Chapter 22
Access Control List (ACL) Commands.
Description
Defines the vendor.
Defines the attribute.
Used to assign the ACL
profile or rule.
270
Value
171 (DLINK)
12 (for ACL profile)
13 (for ACL rule)
ACL Command
For example:
ACL profile: create
access_profile
ethernet vlan
0xFFF profile_id
100;
ACL rule: config
access_profile
profile_id 100 add
access_id
auto_assign
ethernet vlan_id
default port all
deny;
Usage
Required
Required
Required