C613-50631-01 Rev A Command Reference for IE340 Series 2235
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
AUTHENTICATION COMMANDS
AUTH
MULTI-VLAN-SESSION
auth multi-vlan-session
Overview Use this command to enable packet forwarding on multiple VLANs for an
authenticated supplicant attached to a trunked (tagged VLAN) port.
By default, AlliedWare Plus only allows packet forwarding on the VLAN that a
device was authenticated on. This command enables packet forwarding to the
attached device on any VLAN configured on the switchport. After the device
authenticates it will have access to all VLANs configured on the switchport.
Use the no variant of this command to disable packet forwarding on multiple
VLANs for an authenticated supplicant.
Syntax
auth multi-vlan-session
no auth multi-vlan-session
Default By default, multi-vlan-session is disabled.
Mode Interface Configuration for a static channel, a dynamic (LACP) channel group, or a
switch port; or Authentication Profile mode.
Example To allow a client attached to port1.0.2 to access all VLANs configured on the
AlliedWare Plus device, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# switchport mode trunk
awplus(config-if)# switchport trunk allowed vlan all
awplus(config-if)# auth host-mode multi-supplicant
awplus(config-if)# auth multi-vlan-session
To disable multi-vlan-session on interface port1.0.2, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# no auth multi-vlan-session
Related
commands
auth-mac enable
auth-web enable
dot1x port-control
show auth interface
show dot1x interface
Command
changes
Version 5.4.8-1.1: command added
Version 5.4.9-2.1: command added to AR2050V, AR3050S, and AR4050S