D-Link xStack DES-3528 Series - Page 377

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide
370
The table below shows the parameters for a VLAN:
RADIUS Tunnel Attribute Description Value Usage
Tunnel-Type This attribute indicates the
tunneling protocol(s) to be used
(in the case of a tunnel initiator)
or the tunneling protocol in use
(in the case of a tunnel
terminatior).
13 (VLAN) Required
Tunnel-Medium-Type This attribute indicates the
transport medium being used.
6 (802) Required
Tunnel-Private-Group-ID This attribute indicates group ID
for a particular tunneled session.
A string (VID) Required
A summary of the Tunnel-Private-Group-ID Attribute format is shown below.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | Tag | String...
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The table below shows the definition of Tag field (different with RFC 2868):
Tag field value String field format Note
0x01 VLAN name (ASCII) A tag field of greater than 0x1F is
interpreted as the first octet of the
following field.
0x02 VLAN ID (ASCII)
Others
(0x00, 0x03 ~ 0x1F,
>0x1F)
1. When the Switch receives the VLAN setting string, it
will think it is the VLAN ID first. In other words, the Switch
will check all existing VLAN IDs for a match.
2. If the Switch can find one match, it will move to that
VLAN.
3. If the Switch cannot find the matching VLAN IDs, it will
think of the VLAN setting string as a “VLAN Name”.
4. Then it will check to find a matched VLAN Name.
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the 802.1X, MAC
based Access Control, or WAC authentication is successful, the port will be assigned to VLAN 3. However, if the
user does not configure the VLAN attributes, when the port is not a guest VLAN member, it will be kept in its
current authentication VLAN. When the port is guest VLAN member, it will be assigned to its original VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS Server. The table
below shows the parameters for an ACL. The RADIUS ACL assignment is only used in 802.1X, WAC, JWAC and
MAC-based Access Control.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute Description Value Usage
Vendor-ID Defines the vendor. 171 (DLINK) Required
Vendor-Type Defines the attribute. 12 (for ACL profile)
13 (for ACL rule)
Required