Overriding Aaa-Assigned Vlans - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

4. To authenticate all 802.1X users of SSID aircorp in @eng.example.com via pass-through
to sg1, type the following command:
DWS-1008# set authentication dot1x ssid aircorp *@eng.example.com
pass-through sg1
5. Save the configuration:
DWS-1008 save config
success: configuration saved.
The following example shows how to change the VLAN access of wireless users in an organization
housed in multiple buildings.
Suppose the wireless users on the faculty of a college English department have offices in building A
and are authorized to use that building's bldga-prof- VLANs.
These users also teach classes in building B. Because you do not want to tunnel these users back
to building A from building B when they use their wireless laptops in class, you configure the location
policy on the switch to redirect them to the bldgb-eng VLAN.
You also want to allow writing instructors normally authorized to use any -techcomm VLAN in the college
to access the network through the bldgb-eng VLAN when they are in building B.
1. Redirect bldga-prof- VLAN users to the VLAN bldgb-eng:
DWS-1008# set location policy permit vlan bldgb-eng if vlan eq bldga-prof-*
2. Allow writing instructors from -techcomm VLANs to use the bldgb-eng VLAN:
DWS-1008# set location policy permit vlan bldgb-eng if vlan eq *-techcomm
3. Display the configuration:
DWS-1008# show location policy
Id Clauses
-----------------------------------------------------
1) permit vlan bldgb-teach if vlan eq bldga-prof-*
2) permit vlan bldgb-eng if vlan eq *-techcomm
4. Save the configuration:
DWS-1008 save config
success: configuration saved.
D-Link DWS-1008 User Manual

Overriding AAA-Assigned VLANs

8