D-Link xStack DGS-3420 Series Reference Manual page 1116

xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
The table below shows the definition of Tag field (different with RFC 2868):
Tag field value String field format
0x01 VLAN name (ASCII)
0x02 VLAN ID (ASCII)
Others 1. When the Switch receives the VLAN setting
string, it will think it is the VLAN ID first. In other
(0x00, 0x03 ~
words, the Switch will check all existing VLAN IDs
0x1F, >0x1F)
for a match.
2. If the Switch can find one match, it will move to
that VLAN.
3. If the Switch cannot find the matching VLAN IDs,
it will think of the VLAN setting string as a "VLAN
Name".
4. Then it will check to find a matched VLAN Name.
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the
802.1X, MAC based Access Control, or WAC authentication is successful, the port will be assigned to
VLAN 3. However, if the user does not configure the VLAN attributes, when the port is not a guest
VLAN member, it will be kept in its current authentication VLAN. When the port is guest VLAN member,
it will be assigned to its original VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS
Server. The table below shows the parameters for an ACL.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute
Vendor-ID
Vendor-Type
Description
Defines the vendor.
Defines the attribute.
1111
Note
A tag field of greater than 0x1F
is interpreted as the first octet of
the following field.
Value Usage
171 (DLINK) Required
12 (for ACL profile) Required
13 (for ACL rule)