D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual page 333

The table below lists the authorization attributes supported by MSS.
Attribute
Type of encryption required for access
by the client. Clients who attempt to use
encryption-type
an unauthorized encryption method are
rejected.
Date and time after which the user is no
end-date
longer allowed to be on the network.
filter-id Security access control list (ACL), to
(network access permit or deny traffic received (input) or
mode only) sent (output) by the switch.
mobility-profile
(network access Mobility Profile attribute for the user.
mode only)
D-Link DWS-1008 User Manual
Description Valid Value(s)
One of the following numbers that identifies an
encryption algorithm:
• 1—AES_CCM (Advanced Encryption Standard
using Counter with CBC-MAC)
• 2—Reserved
• 4—TKIP (Temporal Key Integrity Protocol)
• 8—WEP_104 (the default) (Wired-Equivalent
Privacy protocol using 104 bits of key strength)
• 16—WEP_40 (Wired-Equivalent Privacy protocol
using 40 bits of key strength)
• 32—NONE (no encryption)
• 64—Static WEP
In addition to these values, you can specify a sum of
them for a combination of allowed encryption types. For
example, to specify WEP_104 and WEP_40, use 24.
Date and time, in the following format:
YY/MM/DD-HH:MM
You can use end-date alone or with start-date. You also
can use start-date, end-date, or both in conjunction
with time-of-day.
Name of an existing security ACL, up to 253
alphanumeric characters, with no tabs or spaces.
• Use acl-name.in to filter traffic that enters the switch
from users via an access port or wired authentication
port, or from the network via a network port.
• Use acl-name.out to filter traffic sent from the switch
to users via an access port or wired authentication
port, or from the network via a network port.
Note: If the Filter-Id value returned through the
authentication and authorization process does not
match the name of a committed security ACL in the
switch, the user fails authorization and is unable to
authenticate.
Name of an existing Mobility Profile, which can be up to
32 alphanumeric characters, with no tabs or spaces.
Note: If the Mobility Profile feature is enabled, and a
user is assigned the name of a Mobility Profile that does
not exist on the switch, the user is denied access.
1