Configure Security-Profile Use-Dynamic-Vlan - Extreme Networks ExtremeWare Command Reference Manual

Security Commands

configure security-profile use-dynamic-vlan

configure security-profile <name> use-dynamic-vlan {y | n}
Description
Determines whether or not the security profile uses the dynamic VLAN (VLAN pushed by the RADIUS
server through a VSA (Vendor Specific Attribute)).
Syntax Description
name Specifies the names of the security profile.
y Specifies yes, to use the dynamic VLAN. The default is y (yes).
n Specifies no, not to use the dynamic VLAN.
Default
Y (yes)
Usage Guidelines
If the variable is set to (yes), and if the RADIUS server is configured to push back VSA 203 or 209, the
Y
pushed back VSAs will override the
they must point to the same VLAN.) The user will be placed in the VLAN indicated by the VSA after
authentication.
If the variable is set to
N
regardless of any VSAs from the RADIUS server.
NOTE
In systems with the Basic software license ("i" series) or Edge software license ("e" series), users are
placed in the VLAN indicated default-user-vlan, regardless of the VSAs pushed back from the RADIUS
server.
Use the following command to configure the
configure security-profile <name> default-user-vlan <vlan>
Example
The following example sets the security profile called open-profile to use the dynamic VLAN:
configure security-profile open-profile use-dynamic-vlan y
History
This command was first available in ExtremeWare 6.2a. It was added to the "e" series in 7.3e and to the
"i" series in 7.3.0.
900
default-user-vlan
(no), the user will be placed in the VLAN indicated by
default-user-vlan
setting. (If both VSAs are configured, then
default-user-vlan
:
ExtremeWare 7.5 Command Reference Guide