D-Link DWS-1008 Informations techniques télécharger pdf (Page 143)

142

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

AAA Commands

set location policy

Creates and enables a location policy on a DWS-1008 switch. A location policy enables you

to locally set or change authorization attributes for a user after the user is authorized by AAA,

without making changes to the AAA server.

Syntax: set location policy deny if {ssid operator ssid-name |

vlan operator vlan-glob | user operator user-glob | port port-list | dap dap-num}

[before rule-number | modify rule-number]

Syntax: set location policy permit {vlan vlan-name | inacl inacl-name |

outacl outacl-name}

if {ssid operator ssid-name | vlan operator vlan-glob | user operator user-glob | port port-list

| dap dap-num} [before rule-number | modify rule-number]

deny Denies access to the network to users with characteristics that match the

location policy rule.

permit Allows access to the network or to a speciﬁed VLAN, and/or assigns a

particular security ACL to users with characteristics that match the location

policy rule.

Action options - For a permit rule, MSS changes the attributes assigned to the user to the

values speciﬁed by the following options:

vlan vlan-name Name of an existing VLAN to assign to users with characteristics that

match the location policy rule.

inacl inacl-name Name of an existing security ACL to apply to packets sent to the switch

with characteristics that match the location policy rule. Optionally, you

can add the sufﬁx .in to the name.

outacl outacl-name Name of an existing security ACL to apply to packets sent from the

switch with characteristics that match the location policy rule.

Optionally, you can add the sufﬁx .out to the name.

Condition options - MSS takes the action speciﬁed by the rule if all conditions in the rule

are met. You can specify one or more of the following conditions:

ssid operator ssid-name SSID with which the user is associated. The operator must be

eq, which applies the location policy rule to all users

associated with the SSID. Asterisks (wildcards) are not supported

in SSID names. You must specify the complete SSID name.

1 2 ... 138 139 140 141 142 143 144 145 146 147 148 ... 405 406

Pas de commentaire

D-Link DWS-1008 Informations techniques Page 143