H3C S9500 Series Operation Manual page 1158

Operation Manual – AAA RADIUS HWTACACS
H3C S9500 Series Routing Switches
Note:
When configuring a VLAN delivering mode, keep the mode configured on the switch
consistent with the mode configured on the Radius Server.
For the string delivery mode, the value range of the VLAN name supported by the
switch is 1-32 characters. If the name configured on the Radius Server exceeds 32
characters, the delivery will fail.
For the string delivery mode, a string that contains numerals only is first interpreted
as a number. That is, if the VLAN name delivered by the RADIUS server contains
only numerals (such as "1024"), and the equivalent integer is within the range 1 to
4,094, the switch takes the VLAN name as an integer and add the authenticated
port to the VLAN identified by the integer (In this case, the switch will add the port to
VLAN 1024). If the equivalent integer is not within the range 1 to 4,094 (such as
string "12345"), the RADIUS server fails to deliver the VLAN name; if the all-numeral
string contains space, such as " 12 345", the first block of non-spaced numbers in
the string will be converted into its equivalent integer, namely, integer 12 in this
example.
Hybrid ports and Trunk ports do not support VLAN delivering; only Access ports
support VLAN delivering.
If HGMP is enabled in the system, you cannot specify VLAN 2047 as a dynamically
delivered VLAN.
Dynamic VLAN delivering configuration includes:
Configuring VLAN delivery mode (integer or string)
Configuring the name of the delivered VLAN
I. Configuring VLAN delivery mode
Perform the following operations in ISP domain view to configure VLAN delivery mode:
Configure the VLAN delivery mode to be integer
Configure the VLAN delivery mode to be string
By default, the integer mode is used. That is, the switch supports the RADIUS server
delivering VLAN IDs in integer form.
II. Configuring name of a delivered VLAN
Perform the following operations in VLAN view to configure the name of a delivered
VLAN:
To do...
1-13
Chapter 1 AAA, RADIUS and HWTACACS
Protocol Configuration
Use the command...
vlan-assignment-mode integer
vlan-assignment-mode string