Setting Up The Authentication Server - Nortel BayStack 450-24T Using Manual

•
For more information about VLANs, see "Virtual Local Area Networks
(VLANs)" on page 1-49.

Setting Up the Authentication Server

This section describes how to set up your Authentication server (RADIUS server)
for EAPOL dynamic VLAN assignments. The Authentication server allows you
to configure user-specific settings for VLAN memberships and port priority.
When you log on to a system that has been configured for EAPOL authentication,
the Authentication server recognizes your user ID and notifies the switch to assign
preconfigured (user-specific) VLAN membership and port priorities to the switch.
The configuration settings are based on configuration parameters that were
customized for your user ID and previously stored on the Authentication server.
To set up the Authentication server, set the following "Return List" attributes for
all user configurations (refer to your Authentication server documentation):
•
•
309978-D Rev 01
When EAPOL is enabled on a port, and you configure values other than
VLAN configuration values, those values are applied and stored in NVRAM.
VLAN Membership Attributes
-- Tunnel-Type: value 13, Tunnel-Type-VLAN
-- Tunnel-Medium-Type: value 6, Tunnel-Medium-Type-802
-- Tunnel-Private-Group-Id: ASCII value 1 to 4094 (this value is used to
identify the specified VLAN)
Port Priority (Vendor-Specific) Attributes
-- Vendor Id: value 562, Nortel Networks vendor ID
-- Attribute Number: value 1, Port Priority
-- Attribute Value: value 0 (zero) to 7 (this value is used to indicate the port
priority value assigned to the specified user)
BayStack 450 10/100/1000 Series Switches
1-25