D-Link xStack DGS-3620 Series Reference Manual page 634

®
xStack DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch Web UI Reference Guide
The table below shows the parameters for a VLAN:
RADIUS Tunnel Attribute
Tunnel-Type
Tunnel-Medium-Type
Tunnel-Private-Group-ID
A summary of the Tunnel-Private-Group-ID Attribute format is shown below.
0
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The table below shows the definition of Tag field (different with RFC 2868):
Tag field value
0x01
0x02
Others
(0x00, 0x03 ~
0x1F, >0x1F)
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the 802.1X, or
MAC-based Access Control, or WAC/JWAC authentication is successful, the port will be assigned to VLAN 3.
However if the user does not configure the VLAN attributes, when the port is not guest VLAN member, it will be
kept in its current authentication VLAN, and when the port is guest VLAN member, it will be assigned to its original
VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS Server. The table
below shows the parameters for an ACL.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute
Vendor-ID
Description
This attribute indicates the
tunneling protocol(s) to be used
(in the case of a tunnel initiator)
or the tunneling protocol in use
(in the case of a tunnel
terminatior).
This attribute indicates the
transport medium being used.
This attribute indicates group ID
for a particular tunneled session.
1
Length | Tag
String field format
VLAN name (ASCII)
VLAN ID (ASCII)
1. When the switch receives the VLAN
setting string, it will think it is the VLAN ID
first. In other words, the switch will check
all existed VLAN ID and check if there is
one matched.
2. If the switch can find one matched, it
will move to that VLAN.
3. If the switch can not find the matched
VLAN ID, it will think the VLAN setting
string as a "VLAN Name".
4. Then it will check that it can find out a
matched VLAN Name.
Description
Defines the vendor.
Value
13 (VLAN)
6 (802)
A string (VID)
2
| String...
Note
A tag field of greater than 0x1F is
interpreted as the first octet of the
following field.
Value
171 (DLINK)
633
Usage
Required
Required
Required
3
Usage
Required