D-Link DWS-3160-24TC, Справочное руководство CLI

Страница: 974 / 983

DWS-3160 Series Gigabit Ethernet Unified Switch CLI Reference Guide
970
(110) 3 - WPA or WPA2
Vendor-Specifc (26),
D-Link (171),
Expected-SSID (109) The expected SSID
for a standalone AP. Character string, 0 to
32 bytes. If string is
empty, then device
may use any SSID Optional “”
Vendor-Specifc (26),
D-Link (171),
Allowed-On-Wired-
Network (113) Flag indicating
whether this stand-
alone AP is allowed
on the wired network. 0 - AP is allowed on
the wired network.
1 - AP is not allowed
on the wired network. Optional 0
An Access Point can use 802.1X authentication via the RADIUS to allow or prohibit access to the
wireless network for specific users on client stations. Wireless Client QoS parameters can be
obtained if (and only if) 802.1X authentication is used, which is based on user name and password
identification credentials. Each of the QoS parameters defined here are optional, meaning they
may not be present in the client's RADIUS server entry even though a valid 802.1X authentication
occurs for the client. Assuming a wireless client successfully authenticates using 802.1X, each
QoS RADIUS attribute that exists for the client will be sent to the AP for processing.
Client 802.1X RADIUS Attributes:
In all other cases, either 802.1X authentication is not used, is used but is not successful, or is
successful but a particular QoS RADIUS attribute is either not configured or not valid for the client
entry. The corresponding AP network client QoS default parameter is used instead for the client.
Each such RADIUS attribute is evaluated this way, case-by-case.
Attribute Description Range Usage
Vendor-Specific (26),
D-Link (171),
Client-ACL-Dn (120) Access list identifier to be applied to
802.1X authenticated wireless client
traffic in the outbound (down) direction.
If this attribute is not present then the
Client QoS Default ACL Down Type
and Name parameters defined in the
Network configuration are used
instead. If this attribute is present but
refers to an undefined access list name
in the system, all packets for this client
will be dropped until the ACL is defined. Type: string 5-
36 characters
(not null-
terminated) The
string is of the
form
"type:name"
where:
• type = ACL
type identifier:
IPV4, IPV6,
MAC
• : = required
separator
character
• name = 1-31
alphanumeric
characters,
specifying the
ACL number
(IPV4) or name
(IPV6, MAC) Optional
Vendor-Specific (26),
D-Link (171),
Client-ACL-Up (121) Access list identifier to be applied to
802.1X authenticated wireless client
traffic in the inbound (up) direction. If
this attribute is not present then the
Client QoS Default ACL Up Type and
Name parameters defined in the Type: string 5-
36 characters
(not null-
terminated)
The string is of
the form Optional