An authentication server informs the authenticator to process the host's traffic on
specific VLANs. This can be done by adding the following attributes on the user
profile:
Tunnel-Type = VLAN
Tunnel-Medium-Type = IEEE-802
Tunnel-Private-Group-ID = <VLAN ID>
With Dynamic VLAN Assignment, administrators allow a more flexible network
access to the users. Host-1 can access VLAN10 by submitting User10 credentials.
Likewise, Host-2 can access VLAN20 by submitting User100 by submitting User100
credentials.
Scenario,
Objectives:
-
Core Switch provides the dynamic IP configurations for Host.
-
If Host enters the "VLAN10" user credentials, Host receives dynamic IP
address for network 192.168.10.0.
-
If Host enters the "VLAN20" user credentials, Host receives dynamic IP
address for network 192.168.20.0.
-
If Host enters an invalid credential, Host is not allowed to communicate
across Core Switch.
www.zyxel.com
66/100