Table of Contents
Advertisement
•
Limit bandwidth on incoming or outgoing traffic for the port the user connects to.
•
Assign account privilege levels for the authenticated user.
The VSAs are composed of the following:
•
Vendor-ID: An identification number assigned to the company by the IANA (Internet Assigned
Numbers Authority). ZyXEL's vendor ID is 890.
•
Vendor-Type: A vendor specified attribute, identifying the setting you want to modify.
•
Vendor-data: A value you want to assign to the setting.
Note:
Refer to the documentation that comes with your RADIUS server on how to
configure VSAs for users authenticating via the RADIUS server.
The following table describes the VSAs supported on the Switch.
Table 87 Supported VSAs
FUNCTION
Ingress Bandwidth
Assignment
Egress Bandwidth
Assignment
Privilege Assignment
24.6.1.1
Tunnel Protocol Attribute
You can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server
documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The
port VLAN settings are fixed and untagged. This will also set the port's VID. The following table
Chapter 24 AAA
ATTRIBUTE
Vendor-Id = 890
Vendor-Type = 1
ingress rate (Kbps in decimal format)
Vendor-data =
Vendor-Id = 890
Vendor-Type = 2
egress rate (Kbps in decimal format)
Vendor-data =
Vendor-ID = 890
Vendor-Type = 3
Vendor-Data = "shell:priv-lvl=N"
or
(CISCO)
Vendor-ID = 9
(CISCO-AVPAIR)
Vendor-Type = 1
Vendor-Data = "shell:priv-lvl=N"
where
is a privilege level (from 0 to 14).
N
Note: If you set the privilege level of a login account differently on the RADIUS server(s)
and the Switch, the user is assigned a privilege level from the database
(RADIUS or local) the Switch uses first for user authentication.
GS1920 Series User's Guide
197
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
