D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual page 464

Attribute
Service-Type
Filter-Id
Reply-Message
State
Class
Vendor-Specific
Session-Timeout
D-Link DWS-1008 User Manual
Rcv in Sent in
Type Access Access
Resp? Reqst?
5 No
11 Yes
18 Yes
24 Yes
25 Yes
26 Yes
27 Yes
Sent in
Acct
Reqst?
Access type, which can be one of the
following:
• 2—Framed; for network user access
• 6—Administrative; for administrative access
to the DWS-1008 switch, with authorization
to access the enabled (configuration) mode.
The user must enter the enable command and
the correct enable password to access the
enabled mode.
• 7—NAS-Prompt; for administrative access to
the nonenabled mode only. In this mode, the
user can still enter the enable command and
Yes Yes
the correct enable password to access the
enabled mode.
For administrative sessions, the switch always
sends 6 (Administrative). The RADIUS server
can reply with one of the values listed above.
If the service-type is not set on the RADIUS
server, administrative users receive NAS-
Prompt access, and network users receive
Framed access.
Note: MSS will quietly accept Callback
Framed but you cannot select this access type
in MSS.
Name of an access control list (ACL) to filter
No Optional outbound or inbound traffic. Use the form ACL
name.in and ACL name.out.
String. Text that can be displayed to the user.
Multiple Reply-Messages can be included.
No No
If any are displayed, they must appear in the
order in which they appear in the packet.
Can be sent by a RADIUS server in an
Access-Challenge message to the switch. If
the receives an Access-Challenge with this
Yes No
attribute, it returns the same State value in
an Access-Request response to the RADIUS
server, when a response is required.
If received, this information must be sent
on, without interpretation, in all subsequent
No Yes
packets sent to the RADIUS server for that
client session.
No Yes String. Allows MSS to support D-Link VSAs.
Maximum number of seconds of service
allowed the user before reauthentication of the
session. Note. If the global reauthentication
No Optional
timeout (set by the set dot1x reauth-period
command) is shorter than the session-timeout,
MSS uses the global timeout instead.
Description and Values