Centrecom FS980M/9 Command Reference Manual page 949

A C
UTHENTICATION OMMANDS
- -
AUTH DYNAMIC VLAN CREATION
If you issue an auth dynamic-vlan-creation command without a rule parameter
then a second supplicant with a different VLAN ID is rejected. It is not assigned to
the first supplicant's VLAN. Issuing an auth dynamic-vlan-creation command
without a rule parameter has the same effect as issuing an auth
dynamic-vlan-creation rule deny command rejecting supplicants with differing
VIDs.
The type parameter specifies whether multiple different VLANs can be assigned to
supplicants attached to the port, or whether only a single VLAN can be assigned to
supplicants on the port. The type parameter can select the port base VLAN or the
MAC base VLAN from the RADIUS VLAN ID. This can be used when the host-mode
is set to multi-supplicant. For single-host ports, the VLAN ID will be assigned to the
port. It is not supported with the Guest VLAN feature. Display the ID assigned using
a show vlan command. For multi-host ports, the VLAN ID will be assigned to the
MAC address of the authenticated supplicant. The VLAN ID assigned for the MAC
Base VLAN is displayed using the show platform table vlan command.
To configure Dynamic Vlan with Web Authentication, you need to set Web
Authentication Server virtual IP address by using the
command or the
create a hardware access-list that can be applied to the switch port interface.
You need to configure an IPv4 address for the VLAN interface on which Web
Authentication is running.
To enable the Dynamic VLAN assignment feature on interface port1.0.2, use
Examples
the commands:
awplus#
awplus(config)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
To enable the Dynamic VLAN assignment feature with Web Authentication on
interface port1.0.2 when Web Authentication is needed, use the commands:
awplus#
awplus(config)#
awplus(config)#
1.2.3.4
awplus(config)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
613-50137-01 Rev A
auth-web-server dhcp ipaddress
configure terminal
interface port1.0.2
switchport access vlan 10
auth-web enable
auth dynamic-vlan-creation
interface vlan10
ip address 10.1.1.1/24
configure terminal
auth-web-server ipaddress 1.2.3.4
access-list hardware acl-web send-to-cpu ip any
interface port1.0.2
auth-web enable
auth dynamic-vlan-creation
access-group acl-web
interface vlan1
ip address 10.1.1.1/24
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.6-2.x
auth-web-server ipaddress
command. You also need to
949