Home » D-Link Manuals » Hubs & Switches » D-Link DIS-300G-14PSW » Manual Viewer

D-Link DIS-300G-14PSW Product Manual - Page 81

User-Priority-Table, Tunnel-Medium-Type, Tunnel-Type, Tunnel-Private, Group-ID

View all D-Link DIS-300G-14PSW manuals

Add to My Manuals
Save this manual to your list of manuals

Page 81 highlights

Command Descriptions otherwise no longer present on the port, the port's QoS Class is immediately reverted to the original QoS Class (which may be changed by the administrator in the meanwhile without affecting the RADIUS-assigned). This option is only available for single-client modes, i.e. • Port-based 802.1X • Single 802.1X RADIUS attributes used in identifying a QoS Class: The User-Priority-Table attribute defined in RFC4675 forms the basis for identifying the QoS Class in an Access-Accept packet. Only the first occurrence of the attribute in the packet will be considered, and to be valid, it must follow this rule: • All 8 octets in the attribute's value must be identical and consist of ASCII characters in the range '0' - '7', which translates into the desired QoS Class in the range [0; 7]. RADIUS-Assigned VLAN When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a Enabled given port, the switch reacts to VLAN ID information carried in the RADIUS Access- Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated. If present and valid, the port's Port VLAN ID will be changed to this VLAN ID, the port will be set to be a member of that VLAN ID, and the port will be forced into VLAN unaware mode. Once assigned, all traffic arriving on the port will be classified and switched on the RADIUS-assigned VLAN ID. If (re-)authentication fails or the RADIUS Access-Accept packet no longer carries a VLAN ID or it's invalid, or the supplicant is otherwise no longer present on the port, the port's VLAN ID is immediately reverted to the original VLAN ID (which may be changed by the administrator in the meanwhile without affecting the RADIUS- assigned). This option is only available for single-client modes, i.e. • Port-based 802.1X • Single 802.1X For trouble-shooting VLAN assignments, use the "Monitor→VLANs→VLAN Membership and VLAN Port" pages. These pages show which modules have (temporarily) overridden the current Port VLAN configuration. RADIUS attributes used in identifying a VLAN ID: RFC2868 and RFC3580 form the basis for the attributes used in identifying a VLAN ID in an Access-Accept packet. The following criteria are used: • The Tunnel-Medium-Type, Tunnel-Type, and Tunnel-PrivateGroup-ID attributes must all be present at least once in the Access-Accept packet. 81

Section	Page
1. Introductions	13
1.1 System Description	13
1.2 Using the Web Interface	13
1.2.1 Web Browser Support	13
1.2.2 Navigation	14
1.2.3 Title Bar Icons	14
1.2.4 Ending a Session	15
1.3 Using the Online Help	15
2. Using the Web	16
2.1 Login	16
2.2 Tree View	17
2.2.1 Configuration Menu	17
2.2.2 Monitor Menu	18
2.2.3 Diagnostics Menu	19
2.2.4 Maintenance Menu	19
2.3 Configuration	20
2.3.1 System	20
2.3.2 System Information	20
2.3.3 System IP	21
2.3.4 System NTP	24
2.3.5 System Time	25
2.3.6 System Log	27
2.3.7 System Alarm Profile	28
2.3.8 Green Ethernet	31
2.3.9 Port Power Savings	31
2.3.10 Port	33
2.3.11 DHCP	35
2.3.12 DHCP Server	35
2.3.13 DHCP Server Mode	35
2.3.14 DHCP Server Excluded IP	37
2.3.15 DHCP Server Pool	38
2.3.16 DHCP Snooping	39
2.3.17 DHCP Relay	40
2.3.18 Security	42
2.3.19 Switch	42
2.3.20 Users	42
2.3.21 Privilege Level	44
2.3.22 Auth Method	46
2.3.23 SSH	48
2.3.24 HTTPS	49
2.3.25 Access Management	49
2.3.26 SNMP	51
2.3.27 SNMP System Configuration	51
2.3.28 SNMP Trap Configuration	53
2.3.29 SNMP Communities	57
2.3.30 SNMP Users	58
2.3.31 SNMP Groups	60
2.3.32 SNMP Views	62
2.3.33 SNMP Access	63
2.3.34 RMON	65
2.3.35 RMON Statistics	65
2.3.36 RMON History	66
2.3.37 RMON Alarm	67
2.3.38 RMON Event	69
2.3.39 Network	71
2.3.40 Limit Control	71
2.3.41 NAS	74
2.3.42 ACL	84
2.3.43 ACL Port	84
2.3.44 ACL Rate Limiters	86
2.3.45 Access Control List	88
2.3.46 IP Source Guard	99
2.3.47 IP Source Guard Configuration	99
2.3.48 IP Source Guard Static Table	101
2.3.49 ARP Inspection	102
2.3.50 Port Configuration	102
2.3.51 VLAN Configuration	104
2.3.52 Static Table	106
2.3.53 Dynamic Table	107
2.3.54 AAA	109
2.3.55 RADIUS	109
2.3.56 TACACS+	111
2.3.57 Aggregation	113
2.3.58 Static Aggregation	113
2.3.59 LACP Aggregation	115
2.3.60 Loop Protection	117
2.3.61 Spanning Tree	119
2.3.62 Bridge Settings	119
2.3.63 MSTI Mapping	121
2.3.64 MSTI Priorities	123
2.3.65 CIST Ports	124
2.3.66 MSTI Ports	127
2.3.67 IPMC Profile	130
2.3.68 Profile Table	130
2.3.69 Address Entry	132
2.3.70 MVR	134
2.3.71 IPMC	137
2.3.72 IGMP Snooping	137
2.3.73 Basic Configuration	137
2.3.74 VLAN Configuration	139
2.3.75 Port Filtering Profile	142
2.3.76 MLD Snooping	143
2.3.77 Basic Configuration	143
2.3.78 VLAN Configuration	145
2.3.79 Port Filtering Profile	148
2.3.80 LLDP	149
2.3.81 LLDP	149
2.3.82 LLDP-MED	151
2.3.83 PoE	158
2.3.84 PoE Scheduler	160
2.3.85 Power Reset	162
2.3.86 MAC Table	163
2.3.87 VLANs	164
2.3.88 Private VLANs	169
2.3.89 Membership	169
2.3.90 Port Isolation	171
2.3.91 VCL	172
2.3.92 MAC-based VLAN	172
2.3.93 Protocol-based VLAN	174
2.3.94 Protocol to Group	174
2.3.95 Group to VLAN	176
2.3.96 IP Subnet-based VLAN	178
2.3.97 Voice VLAN	179
2.3.98 Voice VLAN Configuration	179
2.3.99 Voice VLAN OUI	182
2.3.100 QoS	183
2.3.101 Port Classification	183
2.3.102 Port Policing	186
2.3.103 Port Scheduler	188
2.3.104 Port Shaping	189
2.3.105 Port Tag Remarking	190
2.3.106 Port DSCP	191
2.3.107 DSCP-Based QoS	192
2.3.108 DSCP Translation	195
2.3.109 DSCP Classification	198
2.3.110 QoS Control List	199
2.3.111 Storm Control	204
2.3.112 Mirror	206
2.3.113 GVRP	208
2.3.114 Global Config	208
2.3.115 Port Config	209
2.3.116 sFlow	209
2.3.117 RingV2	213
2.3.118 DDM	216
2.4 Monitor	217
2.4.1 System	217
2.4.2 System Information	217
2.4.3 CPU Load	219
2.4.4 IP Status	220
2.4.5 System Log	222
2.4.6 System Detailed Log	224
2.4.7 System Alarm	224
2.4.8 Green Ethernet	226
2.4.9 Port Power Saving	226
2.4.10 Ports	227
2.4.11 Ports State	227
2.4.12 Trafice Overview	229
2.4.13 QoS Statistics	230
2.4.14 QCL Status	231
2.4.15 Detailed Statistics	233
2.4.16 DHCP	235
2.4.17 DHCP Server	235
2.4.18 Statistics	235
2.4.19 Binding	237
2.4.20 Declined IP	238
2.4.21 DHCP Snooping Table	239
2.4.22 DHCP Relay Statistics	241
2.4.23 DHCP Detailed Statistics	243
2.4.24 Security	245
2.4.25 Accessment Management Statistics	245
2.4.26 Network	246
2.4.27 Port Security	246
2.4.28 Switch	246
2.4.29 Port	248
2.4.30 NAS	250
2.4.31 Switch	250
2.4.32 Port	252
2.4.33 ACL Status	255
2.4.34 ARP Inspection	257
2.4.35 IP Source Guard	259
2.4.36 AAA	261
2.4.37 RADIUS Overview	261
2.4.38 RADIUS Details	263
2.4.39 Switch	264
2.4.40 RMON	264
2.4.41 Statistics	264
2.4.42 History	266
2.4.43 Alarm	268
2.4.44 Event	269
2.4.45 LACP	270
2.4.46 System Status	270
2.4.47 Port Status	271
2.4.48 Port Statistics	272
2.4.49 Loop Protection	273
2.4.50 Spanning Tree	274
2.4.51 Bridge Status	274
2.4.52 Port Status	275
2.4.53 Port Statistics	276
2.4.54 MVR	277
2.4.55 MVR Statistics	277
2.4.56 MVR Channel Groups	278
2.4.57 MVR SFM Information	280
2.4.58 IPMC	282
2.4.59 IGMP Snooping	282
2.4.60 IGMP Snooping Status	282
2.4.61 Groups Information	284
2.4.62 IPv4 SFM Information	286
2.4.63 MLD Snooping	288
2.4.64 MLD Snooping Status	288
2.4.65 Groups Information	290
2.4.66 IPv6 SFM Information	292
2.4.67 LLDP	294
2.4.68 Neighbors	294
2.4.69 LLDP-MED Neighbors	296
2.4.70 EEE	301
2.4.71 Port Statistics	303
2.4.72 PoE	304
2.4.73 MAC Table	307
2.4.74 VLANs	309
2.4.75 VLANs Membership	309
2.4.76 VLANs Ports	311
2.4.77 VCL	313
2.4.78 MAC-Based VLAN	313
2.4.79 sFlow	314
2.4.80 RingV2	315
2.4.81 DDMI Overview	316
2.4.82 DDMI Detailed	317
2.5 Diagnostics	319
2.5.1 Ping	319
2.5.2 Ping6	321
2.5.3 VeriPHY	323
2.6 Maintenance	326
2.6.1 Restart Device	326
2.6.2 Factory Default	327
2.6.3 Software	328
2.6.3.1 Software Upload	328
2.6.3.2 Image select	329
2.6.4 Configuration	331
2.6.4.1 Save startup-config	331
2.6.4.2 Download	332
2.6.4.3 Upload	333
2.6.4.4 Activate	333

Match case Limit results 1 per page

Command Descriptions

otherwise no longer present on the port, the port's QoS Class is immediately reverted

to the original QoS Class (which may be changed by the administrator in the

meanwhile without affecting the RADIUS-assigned).

This option is only available for single-client modes, i.e.

• Port-based 802.1X

• Single 802.1X

RADIUS attributes used in identifying a QoS Class:

The

User-Priority-Table

attribute defined in

RFC4675

forms the basis for

identifying the QoS Class in an Access-Accept packet.

Only the first occurrence of the attribute in the packet will be considered, and to be

valid, it must follow this rule:

• All 8 octets in the attribute's value must be identical and consist of ASCII characters

in the range '0' - '7', which translates into the desired QoS Class in the range [0; 7].

RADIUS-Assigned VLAN

Enabled

When RADIUS-Assigned VLAN is both

globally

enabled and enabled (checked) for a

given port, the switch reacts to VLAN ID information carried in the RADIUS Access-

Accept packet transmitted by the RADIUS server when a supplicant is successfully

authenticated. If present and valid, the port's Port VLAN ID will be changed to this

VLAN ID, the port will be set to be a member of that VLAN ID, and the port will be

forced into VLAN unaware mode. Once assigned, all traffic arriving on the port will be

classified and switched on the RADIUS-assigned VLAN ID.

If (re-)authentication fails or the RADIUS Access-Accept packet no longer carries a

VLAN ID or it's invalid, or the supplicant is otherwise no longer present on the port,

the port's VLAN ID is immediately reverted to the original VLAN ID (which may be

changed by the administrator in the meanwhile without affecting the RADIUS-

assigned).

This option is only available for single-client modes, i.e.

• Port-based 802.1X

• Single 802.1X

For trouble-

shooting VLAN assignments, use the "Monitor→VLANs→VLAN

Membership and VLAN Port" pages. These pages show which modules have

(temporarily) overridden the current Port VLAN configuration.

RADIUS attributes used in identifying a VLAN ID:

RFC2868

and

RFC3580

form the basis for the attributes used in identifying a VLAN

ID in an Access-Accept packet. The following criteria are used:

• The

Tunnel-Medium-Type

Tunnel-Type

, and

Tunnel-Private-

Group-ID

attributes must all be present at least once in the Access-Accept packet.