D-Link DWS-3160-24TC, Справочное руководство

Страница: 499 / 505

DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide
494
Client-ACL-Up (121) inbound (up) direction. If this attribute is not
present then the Client QoS Default ACL Up
Type and Name parameters defined in the
Network configuration are used instead. If this
attribute is present but refers to an undefined
access list name in the system, all packets for
this client will be dropped until the ACL is
defined. terminated) The
string is of the form
"type:name" where:
• type = ACL type
identifier: IPV4,
IPV6, MAC
• : = required
separator character
• name = 1-31
alphanumeric
characters,
specifying the ACL
number (IPV4) or
name (IPV6, MAC)
Vendor-Specific (26),
D-Link (171),
Client-Policy-Dn (122) Name of DiffServ policy to be applied to
802.1X authenticated wireless client traffic in
the outbound (down) direction. If this attribute
is not present then the Client QoS Default
Policy Down parameter defined in the Network
configuration is used instead. If this attribute is
present but refers to an undefined policy name
in the system, all packets for this client will be
dropped until the DiffServ policy is defined. Type: string 1-31
characters (not null-
terminated) Optional
Vendor-Specific (26),
D-Link (171),
Client-Policy-Up (123) Name of DiffServ policy to be applied to
802.1X authenticated wireless client traffic in
the inbound (up) direction. If this attribute is
not present then the Client QoS Default Policy
Up parameter defined in the Network
configuration is used instead. If this attribute is
present but refers to an undefined policy name
in the system, all packets for this client will be
dropped until the DiffServ policy is defined. Type: string 1-31
characters (not null-
terminated) Optional
Tunnel-Type (64) For dynamic VLAN usage. VLAN (13) Optional
Tunnel-Medium-Type (65) For dynamic VLAN usage. 802 Optional
Tunnel-Private-Group-ID
(81) For dynamic VLAN usage. VLANID Optional
The database is used to retrieve client descriptive names from the RADIUS server as well as implement MAC
Authentication. An Access Point can be configured to use MAC authentication via the RADIUS to allow or deny
specific client stations access to the wireless network. This is less secure but can be used for client stations that do
not support 802.1X. The following table indicates the attributes that are configured in the RADIUS server entry.
Known Client and MAC Authentication RADIUS Attributes
Attribute Description Range Usage Default
User-Name (1) Ethernet Address of the
client station. Valid Ethernet MAC
Address. Required None
User-Password (2) A fixed password used
to lookup an client MAC
entry. “NOPASSWORD” Required None
Vendor-Specific (26),
D-Link (171),
MAC-Authentication-Action
(114) Flag indicating what
action to take if MAC
authentication is enabled
on the network. 0-Global Action
1-Grant Access
2-Deny Access Optional 0
Vendor-Specifc (26),
D-Link (171),
Client-Nickname (115) Descriptive Name of the
client. 0-32 Character String Optional “”