Table of Contents
Advertisement
exit
aaa authorization user-role name "testrole"
policy "testpolicy"
vlan-id 100
tunneled-node-server-redirect secondary-role "authenticated"
exit
NOTE: When the reserved-vlan option is used, the applied VLAN ID under the user-role
"testrole" will not be considered. This is because the traffic will be redirected to the controller using
reserved-vlan, and not the one configured on the switch.
Show the tunneled-node-server status for all users.
switch-PoEP# show tunneled-node-users all
PORT
MAC-ADDRESS
1
000ffe-c8ce92
5
082e5f-263518
NOTE: Starting from 16.08, the CLI constraint while configuring tunneled-node-server-
redirect attribute without configuring VLAN ID has been removed.
IP source interface
Syntax
switch(config)# ip source-interface tunneled-node-server
[<IP_ADDRESS> | loopback <LOOPBACK_INTERFACE> | vlan <VLAN_ID>]
Description
Defines source IP address or interface for specified protocol.
NOTE:
•
•
Command context
ip source-interface
Parameters
<IP_ADDRESS>
Specifies IP address.
<LOOPBACK_INTERFACE>
Specifies a loopback interface.
<VLAN_ID>
Specifies VLAN ID.
Example
Running configuration:
Chapter 18 Dynamic Segmentation
TUNNEL-STATUS
UP
UP
If interface has multiple addresses, lowest address is used.
Protocols not configured with a specific address will use the IP address of outbound interface as
source.
SECONDARY-USERROLE
authenticated
authenticated
FAILURE-REASON
627
Advertisement
Table of Contents
Troubleshooting
