Filter
Top Products
xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
933
0x01 VLAN name (ASCII) A tag field of greater than 0x1F
is interpreted as the first octet
of the following field.
0x02 VLAN ID (ASCII)
Others
(0x00, 0x03 ~
0x1F, >0x1F)
1. When the Switch receives the VLAN setting
string, it will think it is the VLAN ID first. In other
words, the Switch will check all existing VLAN IDs
for a match.
2. If the Switch can find one match, it will move to
that VLAN.
3. If the Switch cannot find the matching VLAN
IDs, it will think of the VLAN setting string as a
“VLAN Name”.
4. Then it will check to find a matched VLAN
Name.
If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the
802.1X, MAC based Access Control, or WAC authentication is successful, the port will be
assigned to VLAN 3. However, if the user does not configure the VLAN attributes, when the port is
not a guest VLAN member, it will be kept in its current authentication VLAN. When the port is
guest VLAN member, it will be assigned to its original VLAN.
To assign ACL by RADIUS Server, the proper parameters should be configured on the RADIUS
Server. The table below shows the parameters for an ACL. The RADIUS ACL assignment is only
used in MAC-based Access Control.
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute Description Value Usage
Vendor-ID Defines the vendor. 171 (DLINK) Required
Vendor-Type Defines the attribute. 12 (for ACL profile)
13 (for ACL rule)
Required
Attribute-Specific Field Used to assign the ACL
profile or rule.
ACL Command
For example:
ACL profile: create
access_profile
ethernet vlan 0xFFF
profile_id 100;
ACL rule: config
access_profile
profile_id 100 add
access_id
auto_assign ethernet
vlan_id default port
all deny;
Required
If the user has configured the ACL attribute of the RADIUS server (for example, ACL profile:
create access_profile ethernet vlan 0xFFF profile_id 100; ACL rule: config access_profile
profile_id 100 add access_id auto_assign ethernet), and the MAC-based Access Cotntrol