Configuring Multiple Mode - Alcatel OmniSwitch 6800 Series Network Configuration Manual

Configuring the Server Authority Mode

Configuring Multiple Mode

Multiple authority mode associates different servers with particular VLANs. This mode is typically used
when one party is providing the network and another is providing the server.
When this mode is configured, a client is first prompted to select a VLAN. After the VLAN is selected, the
client then enters a user name and password. The server configured for that particular authenticated VLAN
is polled for a match. (If the server is unavailable, the switch polls the first backup server, if one is config-
ured.) If a match is not found on the first available server, the authentication attempt fails. If a match is
found, the client's MAC address is moved into that VLAN.
A server in multiple authority mode does not have to be configured with VLAN information. If the same
server services more than one VLAN, the same user ID and password may be used to authenticate into one
of several VLANs, depending on which VLAN the user selects at authentication. Clients are only able to
authenticate into one VLAN at a time. (In single authority mode, clients can authenticate into more than
one VLAN at a time if each VLAN is configured for a different protocol.)
In the illustration shown here, the clients connect to the switch and initially belong to VLAN 1. VLANs 2,
3, 4, and 5 have been configured as authenticated VLANs. A single RADIUS server is associated with
VLAN 2, a primary and a backup server are associated with VLAN 5; these servers are not configured
with VLAN information because each server is only serving one VLAN. However, a single LDAP server
is associated with VLAN 3 and VLAN 4 and must contain VLAN information.
VLAN 1
Authentication Clients
page 18-34
OmniSwitch
Authentication Network—Multiple Mode
OmniSwitch 6800 Series Network Configuration Guide
Configuring Authenticated VLANs
Authenticated
VLAN 2
Authenticated
VLAN 3
Authenticated
VLAN 4
for VLANs 3 & 4
Authenticated
VLAN 5
RADIUS servers
RADIUS server
for VLAN 2
LDAP server
for VLAN 5
November 2004