Overriding Aaa-Assigned Vlans - Nortel 2300 Series Configuration Manual

Wlan security switch

Hide thumbs Also See for 2300 Series:

Table of Contents

476 Configuring AAA for Network Users

Overriding AAA-Assigned VLANs

The following example shows how to change the VLAN access of wireless users in an organization housed in multiple

Suppose the wireless users on the faculty of a college English department have offices in building A and are authorized

to use that building's bldga-prof- VLANs. These users also teach classes in building B. Because you do not want to

tunnel these users back to building A from building B when they use their wireless laptops in class, you configure the

location policy on the WSS switch to redirect them to the bldgb-eng VLAN.

You also want to allow writing instructors normally authorized to use any -techcomm VLAN in the college to access the

network through the bldgb-eng VLAN when they are in building B.

Redirect bldga-prof- VLAN users to the VLAN bldgb-eng:

23x0# set location policy permit vlan bldgb-eng if vlan eq

bldga-prof-*

Allow writing instructors from -techcomm VLANs to use the bldgb-eng VLAN:

23x0# set location policy permit vlan bldgb-eng if vlan eq

Display the configuration:

23x0# show location policy

-----------------------------------------------------

1) permit vlan bldgb-teach if vlan eq bldga-prof-*

2) permit vlan bldgb-eng if vlan eq *-techcomm

Save the configuration:

WSS-20 save config

success: configuration saved.