Vlan-Assignment-Mode - Huawei Quidway S8500 Series Command Manual

Command Manual – Security
Quidway S8500 Series Routing Switches
[Quidway-luser-huawei1] state block

2.1.21 vlan-assignment-mode

Syntax
vlan-assignment-mode { integer | string }
View
ISP domain view
Parameter
integer: Specify the VLAN delivery mode to be integer.
string: Specify the VLAN delivery mode to be string.
Description
Use the vlan-assignment-mode command to specify the VLAN delivery mode (integer
or string).
By default, the integer mode is used, that is, the switch supports the RADIUS server
delivering VLAN IDs in integer form.
Dynamic VLAN delivering aims to control the network resources available to a user.
With this function enabled, a switch adds the ports connecting to authenticated users to
specified VLANs according to the attribute values delivered by the RADIUS server. In
actual use, ports are usually set to operate in port-based mode in order to work together
with Guest VLAN. A port operating in MAC address-based mode can only have one
host connected to it. Currently, the VLAN IDs delivered by RADIUS servers can be of
integer or string type.
As for a VLAN ID that is of integer type, a switch adds the port to the
corresponding VLAN according to the VLAN ID delivered by the RADIUS
authentication server. If the VLAN does not exist, the switch creates the VLAN first
and then adds the port to the VLAN.
As for a VLAN ID that is of string type, a switch compares the VLAN ID delivered
by the RADIUS authentication server with the names of the VLANs existing on the
switch. If a matching entry is found, the switch adds the port into the corresponding
VLAN. Otherwise, the delivery fails and the user fails to pass the authentication.
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Huawei Technologies Proprietary
2-21
Configuration Commands