xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Guide
518
The parameters of the Vendor-Specific Attribute are:
RADIUS Tunnel Attribute Description Value Usage
Vendor-ID Defines the vendor. 171 (DLINK) Required
Vendor-Type Defines the attribute. 12 (for ACL profile)
13 (for ACL rule)
Required
Attribute-Specific Field Used to assign the ACL
profile or rule.
ACL Command
For example:
ACL profile: create
access_profile
ethernet vlan
0xFFF profile_id
100;
ACL rule: config
access_profile
profile_id 100 add
access_id
auto_assign
ethernet vlan_id
default port all
deny;
Required
If the user has configured the ACL attribute of the RADIUS server (for example, ACL profile: create access_profile
ethernet vlan 0xFFF profile_id 100; ACL rule: config access_profile profile_id 100 add access_id auto_assign
ethernet), and the MAC-based Access Cotntrol authentication is successful, the device will assign the ACL profiles
and rules according to the RADIUS server. For more information about the ACL module, please refer to Chapter 22
Access Control List (ACL) Commands.