3com DUA1550-0AAA02 用户手册

a If the user is listed in Active Directory, and the new rule allowing 

access and assigning VLAN and QoS profile has been applied to the 
user (or a group that the user is a member of), IAS replies Accept with 
the VLAN ID and QoS profile for that user. The switch enables the port 
and configures the VLAN and QoS profile of the port as specified.

b If the user is listed in Active Directory, but the new rule was not 

applied, then if the Default Rule was set to Allow, IAS replies Accept 
and the switch enables the port, otherwise if the Default Rule was set 
to Deny, IAS replies Reject and the switch disables the port.

c If the user is not listed in Active Directory, IAS replies Reject and the 

switch disables the port.