Configuring Vlan Derivation Rules - Siemens SCALANCE W1750D UI Configuration Manual

15.4.4

Configuring VLAN Derivation Rules

The VLAN derivation rules allow administrators to assign a VLAN to the AP clients based on
the attributes returned by the RADIUS server.
You can configure VLAN derivation rules for an SSID profile by using the SCALANCE W UI
or the CLI.
In the SCALANCE W UI
To configure VLAN derivation rules:
1. Perform the following steps:
– To configure VLAN derivation rule for a WLAN SSID profile, navigate to Network >
– To configure VLAN derivation rule for a wired network profile, navigate to Wired > New
2. Click New to create a VLAN assignment rule. The New VLAN Assignment Rule window is
displayed. In this window, you can define a match method by which the string in
is matched with the attribute values returned by the authentication server.
Figure 15-7
3. Select the attribute from the Attribute drop-down list. The list of supported attributes
includes RADIUS attributes, dhcp-option, dot1x-authentication-type, mac-address, and
mac-address-and-dhcp-options. For information on a list of RADIUS attributes, see
RADIUS Server Authentication with VSA. (Page 209)
SCALANCE W1750D UI
Configuration Manual, 02/2018, C79000-G8976-C451-02
New > New WLAN > VLAN or Network > edit > Edit <WLAN-profile> > VLAN. Select
the Dynamic option under the Client VLAN assignment.
> New Wiredor . The tab contents are displayed.
VLAN Assignment Rule Window
Roles and Policies
15.4 Configuring Derivation Rules
Operand
275