Device Type DES-3028 Fast Ethernet Switch
Boot PROM Version Build 1.00.B06
Firmware Version Build 2.94.B07
Hardware Version A2

есть ли у DES-3028 функционал 802.1x VLAN Assignment ?
функционал отлично отрабатывает на DES-3528 но не работает на %SUBJ
клиент не перемещается в заданный vlan (не по имени, не по VLAN-ID)
настройки комутатора на порт:
vlan 4 egress, untagged (по умолчанию)
vlan 172 none (сюда пытаемся переместить клиента политикой)
остальные vlan в forbidden

IAS LOG:
Name Value
NAS-IP-Address 10.90.90.103 IP address of the NAS originating the request (IAS only)
User-Name host/eng1.hospital.local User requesting authentication
Record-Date 01/29/2015
Record-Time 09:42:28
Service-Name IAS
Computer-Name DC1
Class 311 1 192.168.1.11 01/16/2015 00:36:58 3017 Used to classify accounting records
EAP-Friendly-Name Microsoft: Secured password (EAP-MSCHAP v2) EAP Friendly name
Authentication-Type 11 Authentication scheme used to verify user
MS-PEAP-Fast-Roamed-Session 0
MS-CHAP-Domain HOSPITAL
MS-Extended-Quarantine-State No Data
MS-Quarantine-State Full Access
Client-IP-Address 10.90.90.103 IP address of RADIUS client. (IAS only)
Client-Vendor RADIUS Standard Manufacturer of RADIUS proxy or NAS. (IAS only)
Client-Friendly-Name sw-3 Friendly name for the RADIUS client. (IAS only)
Proxy-Policy-Name Use Windows authentication for all users
Provider-Type Windows
SAM-Account-Name HOSPITAL\ENG1$
Fully-Qualifed-User-Name HOSPITAL\ENG1$
NP-Policy-Name Ïðîâîäíîé (802.1x) Êîìïüþòåðû ÌÈÑ Friendly name of Network Access Policy
Quarantine-Update-Non-Compliant 1
Framed-Protocol PPP The protocol to be used
Service-Type Framed Type of service user has requested
Tunnel-Medium-Type 802 (includes all 802 media plus Ethernet canonical format) Transport medium to use when creating a tunnel for protocols (such as L2TP) that can operate over multiple transports
Tunnel-Preference 1 Relative preference assigned to each tunnel when more than one set of tunneling attributes is returned to the tunnel initiator
Tunnel-Pvt-Group-ID VLAN-PROTECT Group ID for a particular tunneled session
Tunnel-Type Virtual LANs (VLAN) Tunneling protocols to be used
Packet-Type Access-Accept
Reason-Code IAS_SUCCESS

_________________
с Уважением,
Дмитрий Митрофанов

Пример настройки можно найти по ссылке: http://dlink.ru/ru/faq/62/979.html