D-Link DWS-3160-24TC, Справочное руководство

Страница: 497 / 505

DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide
492
Attribute-Specific Field Used to assign the ACL
profile or rule. ACL Command
For example:
ACL profile: create access_profile profile_id 6
profile_name 1 ethernet vlan 0xFFF;
ACL rule: config access_profile profile_id 6
add access_id auto_assign ethernet vlan_id 1
port all deny; Required
If the user has configured the ACL attribute of the RADIUS server (for example, ACL profile: create
access_profile profile_id 6 profile_name 1 ethernet ; ACL rule: config access_profile profile_id 6 add
access_id auto_assign ethernet ), and the 802.1X or MAC-based Access Control or WAC authentication is
successful, the device will assign the ACL profiles and rules according to the RADIUS server. For more information
about the ACL module, please refer to the ‘Access Control List (ACL) Command List’ chapter.
Since an AP configuration is determined by its physical MAC address, the administrator adds a RADIUS entry for
each AP with the User-Name attribute set to the MAC address. The following table indicates the attributes that are
configured in the RADIUS server entry. The vendor specific attributes are added using the D-Link vendor ID (171).
AP RADIUS Attributes
Attribute Description Range Usage Default
User-Name (1) Ethernet Address of the AP. Valid Ethernet MAC
Address. Required None
User-Password (2) A fixed password used to
lookup an AP entry. 8-63 characters, default
“NOPASSWORD” Required None
Vendor-Specific (26),
D-Link (171),
Location (101) A description for the AP,
often based on its location. 0-32 characters Optional “”
Vendor-Specifc (26),
D-Link (171),
Mode (102) Indicates whether this AP is
managed by the Switch, by
an administrator, or is a
rogue AP. Managed (1),
Standalone (2),
Rogue (3) Required None
Vendor-Specifc (26),
D-Link (171),
Profile-ID (103) If AP is managed by a
Switch, the ID of the
configuration profile for this
AP. 1-16 Required if
mode is WS-
Managed. None
Vendor-Specifc (26),
D-Link (171),
Switch-IP (104) If there is more than one
WS using this RADIUS
server, indicates the IP
address of the WS to
managed this AP. Valid IP Address Optional None
Vendor-Specifc (26),
D-Link (171),
Radio-1-Chan (105) Indicates a fixed channel for
the radio. 0, 1-13, 36, 40, 44, 48,
52,56, 60, 64, 104, 108,
112,116, 120, 124, 128,
132,140, 149, 153, 157,
161,165. 0 indicates
automatic channel
assignment. Optional, if
defined and
valid will
override auto
channel
configuration 0
Vendor-Specifc (26),
D-Link (171),
Radio-2-Chan (106) Indicates a fixed channel for
the radio. 0, 1-13, 36, 40, 44, 48,
52,56, 60, 64, 104, 108,
112,116, 120, 124, 128,
132,140, 149, 153, 157,
161,165. 0 indicates
automatic channel
assignment. Optional, if
defined and
valid will
override auto
channel
configuration. 0
Vendor-Specifc (26),
D-Link (171), Indicates a fixed power
setting for the radio. 0, 1-100 percent 0
indicates automatic Optional, if
defined and 0