Dell PowerConnect B-RX Configuration Manual page 1031

Value
ip.<number>.in
ip.<name>.in
mac.<number>.in
The following table lists examples of values you can assign to the Filter-ID attribute on the RADIUS
server to refer to IP ACLs and MAC address filters configured on a BigIron RX.
Possible values for the filter ID attribute on the
RADIUS server
ip.2.in
ip.102.in
ip.fdry_filter.in
mac.401.in
mac.402.in
mac.403.in
NOTES:
BigIron RX Series Configuration Guide
53-1001986-01
Description
Applies the specified numbered ACL to the 802.1x
authenticated port in the inbound direction.
Applies the specified named ACL to the 802.1x authenticated
port in the inbound direction.
Applies the specified numbered MAC address filter to the
802.1x authenticated port in the inbound direction.
•
The <name> in the Filter ID attribute is case-sensitive.
•
You can specify only numbered MAC address filters in the Filter ID attribute. Named
MAC address filters are not supported.
•
Dynamic ACL filters are supported only for the inbound direction. Dynamic outbound
ACL filters are not supported.
•
MAC address filters are supported only for the inbound direction. Outbound MAC
address filters are not supported.
•
Dynamically assigned IP ACLs and MAC address filters are subject to the same
configuration restrictions as non-dynamically assigned IP ACLs and MAC address
filters.
•
Multiple IP ACLs and MAC address filters can be specified in the Filter ID attribute,
allowing multiple filters to be simultaneously applied to an 802.1x authenticated port.
Use commas, semicolons, or carriage returns to separate the filters (for example
ip.3.in,mac.2.in).
•
If 802.1x is enabled on a VE port, ACLs, dynamic (802.1x assigned) or static (user
configured), cannot be applied to the port.
Configuring 802.1x port security
ACL or MAC address filter configured on the BigIron RX device
access-list 2 permit host 36.48.0.3
access-list 2 permit 36.0.0.0 0.255.255.255
access-list 102 permit ip 36.0.0.0 0.255.255.255 any
ip access-list standard fdry_filter
permit host 36.48.0.3
access-list 401 permit 3333.3333.3333 ffff.ffff.ffff any etype eq
0800
access-list 402 permit 3333.3333.3333 ffff.ffff.ffff any etype eq
0800
access-list 403 permit 2222.2222.2222 ffff.ffff.ffff any etype eq
0800
33
959