User`s manual

296
DWS-1008 User’s Manual
D-Link Systems, Inc.
Conguring AAA for Network Users
lter-id
(network access
mode only)
Security access
control list (ACL), to
permit or deny trafc
received (input) or
sent (output) by the
switch.
Name of an existing security ACL,
up to 253 alphanumeric characters,
with no tabs or spaces.
• Use acl-name.in to lter trafc
that enters the switch from users
via an DWL-8220AP access port
or wired authentication port, or
from the network via a network
port.
• Use acl-name.out to lter trafc
sent from the switch to users via
an DWL-8220AP access port
or wired authentication port, or
from the network via a network
port.
Note: If the Filter-Id value returned
through the authentication and
authorization process does not
match the name of a committed
security ACL in the switch, the user
fails authorization and is unable to
authenticate.
idle-timeout This option is not implemented in the current MSS
version.
mobility-prole
(network access
mode only)
Mobility Prole
attribute for the
user. (For more
information, see
Conguring a
Mobility Prole.)
Name of an existing Mobility
Prole, which can be up to
32 alphanumeric characters, with
no tabs or spaces.
Note: If the Mobility Prole feature
is enabled, and a user is assigned
the name of a Mobility Prole that
does not exist on the switch, the
user is denied access.