D-Link DWS-3160-24TC, Справочное руководство CLI

Страница: 975 / 983

DWS-3160 Series Gigabit Ethernet Unified Switch CLI Reference Guide
971
Network configuration are used
instead. If this attribute is present but
refers to an undefined access list name
in the system, all packets for this client
will be dropped until the ACL is defined. "type:name"
where:
• type = ACL
type identifier:
IPV4, IPV6,
MAC
• : = required
separator
character
• name = 1-31
alphanumeric
characters,
specifying the
ACL number
(IPV4) or name
(IPV6, MAC)
Vendor-Specific (26),
D-Link (171),
Client-Policy-Dn (122) Name of DiffServ policy to be applied to
802.1X authenticated wireless client
traffic in the outbound (down) direction.
If this attribute is not present then the
Client QoS Default Policy Down
parameter defined in the Network
configuration is used instead. If this
attribute is present but refers to an
undefined policy name in the system,
all packets for this client will be
dropped until the DiffServ policy is
defined. Type: string 1-
31 characters
(not null-
terminated) Optional
Vendor-Specific (26),
D-Link (171),
Client-Policy-Up (123) Name of DiffServ policy to be applied to
802.1X authenticated wireless client
traffic in the inbound (up) direction. If
this attribute is not present then the
Client QoS Default Policy Up
parameter defined in the Network
configuration is used instead. If this
attribute is present but refers to an
undefined policy name in the system,
all packets for this client will be
dropped until the DiffServ policy is
defined. Type: string 1-
31 characters
(not null-
terminated) Optional
Tunnel-Type (64) For dynamic VLAN usage. VLAN (13) Optional
Tunnel-Medium-Type
(65) For dynamic VLAN usage. 802 Optional
Tunnel-Private-Group-
ID (81) For dynamic VLAN usage. VLANID Optional
The database is used to retrieve client descriptive names from the RADIUS server as well as
implement MAC Authentication. An Access Point can be configured to use MAC authentication via
the RADIUS to allow or deny specific client stations access to the wireless network. This is less
secure but can be used for client stations that do not support 802.1X. The following table indicates
the attributes that are configured in the RADIUS server entry.
Known Client and MAC Authentication RADIUS Attributes: