D-Link Xstack DES-3528 Series Reference Manual page 377

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide
The table below shows the parameters for a VLAN:
RADIUS Tunnel Attribute
Tunnel-Type
Tunnel-Medium-Type
Tunnel-Private-Group-ID
A summary of the Tunnel-Private-Group-ID Attribute format is shown below.
0
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The table below shows the definition of Tag field (different with RFC 2868):
Tag field value String field format
0x01 VLAN name (ASCII)
0x02 VLAN ID (ASCII)
Others 1. When the Switch receives the VLAN setting string, it
will think it is the VLAN ID first. In other words, the Switch
(0x00, 0x03 ~ 0x1F,
will check all existing VLAN IDs for a match.
>0x1F)
2. If the Switch can find one match, it will move to that
VLAN.
3. If the Switch cannot find the matching VLAN IDs, it will
think of the VLAN setting string as a "VLAN Name".
4. Then it will check to find a matched VLAN Name.
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the 802.1X, MAC
based Access Control, or WAC authentication is successful, the port will be assigned to VLAN 3. However, if the
user does not configure the VLAN attributes, when the port is not a guest VLAN member, it will be kept in its
current authentication VLAN. When the port is guest VLAN member, it will be assigned to its original VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS Server. The table
below shows the parameters for an ACL. The RADIUS ACL assignment is only used in 802.1X, WAC, JWAC and
MAC-based Access Control.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute
Vendor-ID
Vendor-Type
Description
This attribute indicates the
tunneling protocol(s) to be used
(in the case of a tunnel initiator)
or the tunneling protocol in use
(in the case of a tunnel
terminatior).
This attribute indicates the
transport medium being used.
This attribute indicates group ID
for a particular tunneled session.
1
Length | Tag
Description
Defines the vendor.
Defines the attribute.
Value
13 (VLAN)
6 (802)
A string (VID)
2
| String...
Value
171 (DLINK)
12 (for ACL profile)
13 (for ACL rule)
370
Usage
Required
Required
Required
3
Note
A tag field of greater than 0x1F is
interpreted as the first octet of the
following field.
Usage
Required
Required