294
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuring AAA for Network Users
Configuring Access for Any Users of a Non-Tagged SSID
If SSID traffic from the third-party AP is untagged, use the same configuration commands
as the ones required for 802.1X users, except the
set radius proxy port
command. This
command is not required and is not applicable to untagged SSID traffic. In addition, when
configuring the wired authentication port, use the
auth-fall-thru
option to change the fallthru
authentication type to
last-resort
or
web-portal
.
On the RADIUS server, configure username
web-portal-wired
or
last-resort-wired
,
depending on the fallthru authentication type specified for the wired authentication port.
Assigning Authorization Attributes
Authorization attributes can be assigned to users in the local database or on remote servers.
The attributes, which include access control list (ACL) filters, VLAN membership, encryption
type, session time-out period, and other session characteristics, let you control how and
when users access the network. When a user or group is authenticated, the local database
or RADIUS server passes the authorization attributes to MSS to characterize the user’s
session.
The VLAN attribute is required. MSS can authorize a user to access the network only if the
VLAN to place the user on is specified.
The table below lists the authorization attributes supported by MSS. (For brief descriptions
of all the RADIUS attributes and D-link vendor-specific attributes supported by MSS, as well
as the vendor ID and types for D-link VSAs configured on a RADIUS server, see Appendix B,
“Supported RADIUS Attributes”).
Summary of Contents for DWS-1008
Page 1: ......
