xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
526
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the 802.1X, or MAC-based Access
Control authentication is successful, the port will be added to VLAN 3. However, if the user does not configure the VLAN
attribute and authenticates successfully, the port will be kept in its original VLAN. If the VLAN attribute configured on the
RADIUS server does not exist, the port will not be assigned to the requested VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS Server. The table below shows
the parameters for an ACL. The RADIUS ACL assignment is only used in MAC-based Access Control.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute Description Value Usage
Vendor-ID Defines the vendor. 171 (DLINK) Required
Vendor-Type Defines the attribute. 12 (for ACL profile)
13 (for ACL rule)
Required
Attribute-Specific Field Used to assign the ACL
profile or rule.
ACL Command
For example:
ACL profile: create
access_profile
ethernet vlan
0xFFF profile_id
100;
ACL rule: config
access_profile
profile_id 100 add
access_id
auto_assign
ethernet vlan_id
default port all
deny;
Required
If the user has configured the ACL attribute of the RADIUS server (for example, ACL profile: create access_profile ethernet
vlan 0xFFF profile_id 100; ACL rule: config access_profile profile_id 100 add access_id auto_assign ethernet), and the
MAC-based Access Cotntrol authentication is successful, the device will assign the ACL profiles and rules according to the
RADIUS server. For more information about the ACL module, please refer to Chapter 22 Access Control List (ACL) Commands.
To Previous Page
Loading...
Need help?
General
