AT-9000 Switch Command Line User’s Guide
949
If dynamic VLAN creation is enabled by issuing AUTH DYNAMIC-VLAN-
CREATION MULTI, each supplicant that successfully authenticates will be
placed in its own VLAN.
Supplicant VLAN
Attributes on the
RADIUS Server
The following information must be entered as part of a supplicant’s
account on the RADIUS server when associating a supplicant to an
untagged VLAN.
Tunnel-Type
The protocol to be used by the tunnel specified by Tunnel-Private-
Group-Id. The only supported value is VLAN (13).
Tunnel-Medium-Type
The transport medium to be used for the tunnel specified by
Tunnel-Private-Group-Id. The only supported value is 802 (6).
Tunnel-Private-Group-ID
The ID of the tunnel the authenticated user should use. This must
be the name of VID of the VLAN of the switch.
The following information must be entered as part of a supplicant’s
account on the RADIUS server when associating a supplicant to a tagged
VLAN:
Egress-VLANID attribute (specified in RFC4675 - used to specify
802.1Q tagged and untagged VLAN assignments with LLDP-MED/
VoiceVLAN). The only supported value is Egress-VLANID (56).
For example: Egress-VLANID := 0x3100005A represents Tagged with
VLANID = 90.
Only “Tagged” is supported, that is the attribute value must begin
with 0x31. For untagged VLANs, use Tunnel-Private-Group-ID.
To Next Page
Loading...
Need help?
General
