Dynamic Vlan Assignment Configuration; Configuring Dynamic Vlan Assignment - Huawei Quidway S3100 Series Operation Manual

Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches
Note:
If a bound AAA scheme is configured as well as the separate authentication,
authorization and accounting schemes, the separate ones will be adopted in
precedence.
RADIUS scheme and local scheme do not support the separation of authentication
and authorization. Therefore, pay attention when you make authentication and
authorization configuration for a domain: if the scheme radius-scheme or scheme
local command is executed, the authorization none command is executed, while
the authentication command is not executed, the authorization information
returned from the RADIUS or local scheme still takes effect.

1.4 Dynamic VLAN Assignment Configuration

The dynamic VLAN assignment feature enables a switch to dynamically add the ports
of the successfully authenticated users to different VLANs according to the attributes
assigned by the RADIUS server, so as to control the network resources that different
users can access.
Currently, the switch supports the following two types of VLAN IDs assigned by its
RADIUS authentication server.
Integer: The switch adds a port to the corresponding VLAN according to the VLAN
ID (integer value) assigned by the RADIUS authentication server. If the VLAN
does not exist, it first creates the VLAN, and then adds the port to the newly
created VLAN.
String: The switch compares the VLAN ID (string value) assigned by the RADIUS
authentication server with the existing VLAN names on the switch. If it finds a
match, it adds the port to the corresponding VLAN. Otherwise, the VLAN
assignment fails and the user cannot pass the authentication.
In actual applications, to use this feature together with Guest VLAN, you should better
set port control to port-based mode; if you set port control to MAC-address-based
mode, each port can be connected to only one user.

1.4.1 Configuring Dynamic VLAN Assignment

Table 1-8 Configure dynamic VLAN assignment
Operation
Enter system view
Create
domain and enter its
view
Command
system-view
an ISP
domain isp-name
Huawei Technologies Proprietary
Chapter 1 AAA&RADIUS Configuration
—
—
1-14
Description