Supplicant Vlan Attributes On The Radius Server - Allied Telesis AT-9000 Series User Manual

Supplicant VLAN
Attributes on the
RADIUS Server
If dynamic VLAN creation is enabled by issuing AUTH DYNAMIC-VLAN-
CREATION MULTI, each supplicant that successfully authenticates will be
placed in its own VLAN.
The following information must be entered as part of a supplicant's
account on the RADIUS server when associating a supplicant to an
untagged VLAN.
Tunnel-Type

The protocol to be used by the tunnel specified by Tunnel-Private-
Group-Id. The only supported value is VLAN (13).
Tunnel-Medium-Type

The transport medium to be used for the tunnel specified by
Tunnel-Private-Group-Id. The only supported value is 802 (6).
Tunnel-Private-Group-ID

The ID of the tunnel the authenticated user should use. This must
be the name of VID of the VLAN of the switch.
The following information must be entered as part of a supplicant's
account on the RADIUS server when associating a supplicant to a tagged
VLAN:
Egress-VLANID attribute (specified in RFC4675 - used to specify
802.1Q tagged and untagged VLAN assignments with LLDP-MED/
VoiceVLAN). The only supported value is Egress-VLANID (56).
For example: Egress-VLANID := 0x3100005A represents Tagged with
VLANID = 90.
Note
Only "Tagged" is supported, that is the attribute value must begin
with 0x31. For untagged VLANs, use Tunnel-Private-Group-ID.
AT-9000 Switch Command Line User's Guide
949