Configuring Authenticated Vlans; Removing A User From An Authenticated Network - Alcatel-Lucent OmniSwitch 6800 Series Network Configuration Manual

Configuring Authenticated VLANs

4
To apply the change, click the Apply button. When you click the OK button, the screen will close and
the change will take effect. If you decide not to implement the change, click the Cancel button and the
screen will close without implementing a change.
Configuring Authenticated VLANs
At least one authenticated VLAN must be configured on the switch. For more information about VLANs
in general, see Chapter 4, "Configuring VLANs."
To configure an authenticated VLAN, use the
an existing VLAN. For example:
-> vlan 2 authentication enable
Note that the specified VLAN (in this case, VLAN 2) must already exist on the switch. A router port must
also be configured for the VLAN (with the
For example:
-> vlan 2 router ip 10.10.2.20
See "Setting Up the DHCP Server" on page 26-29

Removing a User From an Authenticated Network

To remove a user from authenticated VLANs, enter the
address. If the user's MAC address is unknown, enter the
VLAN ID or slot number to get information about a particular VLAN or slot only. For example:
-> show avlan user 23
name
----------------------------------------------------------------
user1
In this example, user1 is authenticated into VLAN 23 and is using MAC address 00:20:da:05:f6:23. To
remove user1 from authenticated VLAN 23, enter the aaa vlan no command with the MAC address. For
example:
-> aaa avlan no 00:20:da:05:f6:23
When this command is entered, user1 will be removed from VLAN 23. If the switch is set up so that
authenticated users may traffic in the default VLAN, the user will be placed into the default VLAN of the
authentication port. (See
information about setting up the switch so that authentication clients may traffic in the default VLAN prior
to authentication.)
For more information about the output display for the aaa avlan no and show avlan user commands, see
the OmniSwitch CLI Reference Guide.
Note. The MAC addresses of users may also be found in the log files generated by accounting servers.
page 26-26
vlan authentication
ip interfacecommand) so that a DHCP relay may be set up.
Mac Address
00:20:da:05:f6:23
"Setting Up the Default VLAN for Authentication Clients" on page 26-27
OmniSwitch 6800/6850/9000 Network Configuration Guide
Configuring Authenticated VLANs
command to enable authentication on
for more information about setting up a DHCP server.
aaa vlan no command with the user's MAC
show avlan user command first. Specify the
Slot Port Vlan
02 02 23
for
March 2008