Configure Security-Profile Default-User-Vlan - Extreme Networks ExtremeWare Command Reference Manual

configure security-profile default-user-vlan

configure security-profile <name> default-user-vlan <vlan> [tagged |
untagged]
Description
Configures the default data VLAN for wireless users.
Syntax Description
name Specifies the name of the security profile.
vlan Specifies the name of the default VLAN for wireless users.
tagged Specifies that the Altitude 300 access point (AP) should send the wireless user traffic tagged.
NOTE: This option applies only to remote connect Altitude 300 APs in Summit 300-48 switches.
untagged Specifies that the Altitude 300 AP should send the wireless user traffic untagged.
NOTE: This option applies only to remote connect Altitude 300 APs in Summit 300-48 switches.
Default
The default value for the <vlan> parameter is the wireless management default VLAN.
The default value for tagging is null (for backward compatibility).
Usage Guidelines
Wireless users are placed in the specified default user VLAN parameter after authentication when any
of the following conditions is true:
• The
use-dynamic-vlan
configured to push back VSA 203 or 209.
• The switch has a Basic software license ("i" series) or an Edge software license ("e" series); these
licenses do not support Radius VSAs.
• The
use-dynamic-vlan
Using the [tagged | untagged] Option
Starting with ExtremeWare 7.6, you can specify that the remote connect Altitude 300 AP will send user
traffic tagged or untagged. If neither option is specified explicitly, user traffic is sent tagged.
By default, a remote connect Altitude 300 AP sends user traffic tagged. If the remote connect Altitude
300 AP is connected to the rest of the network through an edge switch that does not have the VLAN tag
defined, the edge switch will drop this user traffic, since the VLAN tag is unknown. To handle this
situation, you can set the
You do not need to explicitly specify the
AP. A direct connect Altitude 300 AP sends wireless user traffic untagged if the user VLAN configured
is the same as the wireless management VLAN. The Altitude 300 AP tags the user traffic if the user
VLAN configured is different from wireless management VLAN.
ExtremeWare 7.7 Command Reference Guide
variable in the security profile is set to y (yes), and the RADIUS server is not
variable in the security profile is set to n (no).
option.
untagged
tagged | untagged
configure security-profile default-user-vlan
option for a direct connect Altitude 300
917