exit
aaa authorization user-role name "testrole"
policy "testpolicy"
vlan-id 100
tunneled-node-server-redirect secondary-role "authenticated"
exit
NOTE: When the reserved-vlan option is used, the applied VLAN ID under the user-role
"testrole" will not be considered. This is because the traffic will be redirected to the controller using
reserved-vlan, and not the one configured on the switch.
Show the tunneled-node-server status for all users.
switch-PoEP# show tunneled-node-users all
PORT MAC-ADDRESS TUNNEL-STATUS SECONDARY-USERROLE FAILURE-REASON
1 000ffe-c8ce92 UP authenticated
5 082e5f-263518 UP authenticated
NOTE: Starting from 16.08, the CLI constraint while configuring tunneled-node-server-
redirect attribute without configuring VLAN ID has been removed.
IP source interface
Syntax
switch(config)# ip source-interface tunneled-node-server
[<IP_ADDRESS> | loopback <LOOPBACK_INTERFACE> | vlan <VLAN_ID>]
Description
Defines source IP address or interface for specified protocol.
NOTE:
• If interface has multiple addresses, lowest address is used.
• Protocols not configured with a specific address will use the IP address of outbound interface as
source.
Command context
ip source-interface
Parameters
<IP_ADDRESS>
Specifies IP address.
<LOOPBACK_INTERFACE>
Specifies a loopback interface.
<VLAN_ID>
Specifies VLAN ID.
Example
Running configuration:
Chapter 18 Dynamic Segmentation 627
To Next Page
Loading...
