Huawei Quidway S5600 Series Operation Manual page 549

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S5600 Series Ethernet Switches-Release 1510
Currently, the switch supports the RADIUS authentication server to assign the following
two types of VLAN IDs: integer and string.
Integer: If the RADIUS server assigns integer type of VLAN IDs, you can set the
VLAN assignment mode to integer on the switch (this is also the default mode on
the switch). Then, upon receiving an integer ID assigned by the RADIUS
authentication server, the switch adds the port to the VLAN whose VLAN ID is
equal to the assigned integer ID. If no such a VLAN exists, the switch first creates
a VLAN with the assigned ID, and then adds the port to the newly created VLAN.
String: If the RADIUS server assigns string type of VLAN IDs, you can set the
VLAN assignment mode to string on the switch. Then, upon receiving a string ID
assigned by the RADIUS authentication server, the switch compares the ID with
existing VLAN names on the switch. If it finds a match, it adds the port to the
corresponding VLAN. Otherwise, the VLAN assignment fails and the user cannot
pass the authentication.
In actual applications, to use this feature together with Guest VLAN, you should better
set port control to port-based mode.
Table 1-9 Configure dynamic VLAN assignment
Operation
Enter
view
Create
domain and enter
its view
Set the
assignment mode
Create a VLAN
and enter its view
Set a VLAN name
for
assignment
Command
system
system-view
an ISP
domain isp-name
VLAN vlan-assignment-mode
{ integer | string }
vlan vlan_id
VLAN name string
Huawei Technologies Proprietary
Chapter 1 AAA & RADIUS & HWTACACS
—
—
Optional
By
assignment mode is integer.
—
This operation is required if the
VLAN assignment mode is set to
string.
1-19
Configuration
Description
default, the VLAN