D-Link xStack DES-3200 Series Reference Manual page 531

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the 802.1X, or MAC-based Access
Control authentication is successful, the port will be added to VLAN 3. However, if the user does not configure the VLAN
attribute and authenticates successfully, the port will be kept in its original VLAN. If the VLAN attribute configured on the
RADIUS server does not exist, the port will not be assigned to the requested VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS Server. The table below shows
the parameters for an ACL. The RADIUS ACL assignment is only used in MAC-based Access Control.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute
Vendor-ID
Vendor-Type
Attribute-Specific Field
If the user has configured the ACL attribute of the RADIUS server (for example, ACL profile: create access_profile ethernet
vlan 0xFFF profile_id 100; ACL rule: config access_profile profile_id 100 add access_id auto_assign ethernet), and the
MAC-based Access Cotntrol authentication is successful, the device will assign the ACL profiles and rules according to the
RADIUS server. For more information about the ACL module, please refer to Chapter 22 Access Control List (ACL) Commands.
Description
Defines the vendor.
Defines the attribute.
Used to assign the ACL
profile or rule.
526
Value
171 (DLINK)
12 (for ACL profile)
13 (for ACL rule)
ACL Command
For example:
ACL profile: create
access_profile
ethernet vlan
0xFFF profile_id
100;
ACL rule: config
access_profile
profile_id 100 add
access_id
auto_assign
ethernet vlan_id
default port all
deny;
Usage
Required
Required
Required