H3C S9500 Series Operation Manual page 759

Operation Manual – Security
H3C S9500 Series Routing Switches
Note:
When configuring a VLAN delivering mode, keep the mode configured on the
switch consistent with the mode configured on the Radius Server..
For the string delivery mode, the value range of the VLAN name supported by
the switch is 1-32 characters. If the name configured on the Radius Server
exceeds 32 characters, the delivery will fail.
For the string delivery mode, a string that contains numerals only is first
interpreted as a number. That is, if the VLAN name delivered by the RADIUS
server contains only numerals (such as "1024"), and the equivalent integer is
within the range 1 to 4,094, the switch takes the VLAN name as an integer and
add the authenticated port to the VLAN identified by the integer (In this case, the
switch will add the port to VLAN 1024). If the equivalent integer is not within the
range 1 to 4,094 (such as string "12345"), the RADIUS server fails to deliver the
VALN name; if the all-numeral string contains space, such as " 12
first block of non-spaced numbers in the string will be converted into its
equivalent integer, namely, integer 12 in this example.
Dynamic VLAN delivering configuration includes:
Configuring VLAN delivery mode (integer or string)
Configuring the name of the delivered VLAN
I. Configuring VLAN delivery mode
Perform the following configuration in ISP domain view.
Table 2-9 Configure VLAN delivery mode
Configure the VLAN delivery mode to be integer
Configure the VLAN delivery mode to be string
By default, the integer mode is used. That is, the switch supports the RADIUS server
delivering VLAN IDs in integer form.
II. Configuring name of a delivered VLAN
Perform the following configuration in VLAN view.
Operation
2-13
Chapter 2 AAA and RADIUS/HWTACACS
Protocol Configuration
Command
vlan-assignment-mode
integer
vlan-assignment-mode string
345", the