Configuring A Default Vlan; Assigning Vlans To Individual Users - HP MSM3xx Management And Configuration Manual

Network configuration
VLAN support
2. Under Egress VLAN, select an VLAN ID. To be included in the drop-down list, the VLAN
must be defined on the Network > Ports page and not be assigned to a VLAN range.
3. Select Save.

Configuring a default VLAN

You can configure port 1 (or port 2) with a default VLAN setting so that any outgoing traffic
that is not tagged with a VLAN ID receives the default VLAN ID.
You can restrict this default VLAN to carry management traffic only, which includes the
following:
 All traffic that is exchanged with the controller (login authentication requests/replies)
 All traffic that is exchanged with external RADIUS servers
 HTTPS sessions established by managers and operators of the management tool
 Incoming and outgoing SNMP traffic
 DNS requests and replies.
To assign a default VLAN, see

Assigning VLANs to individual users

You can assign a VLAN to an individual user by setting the attributes Tunnel-Medium-Type,
Tunnel-Private-Group-ID, and Tunnel-Type in the user's RADIUS account. Restrictions
are as follows:
 A user cannot be assigned to a VLAN that is set as the default VLAN on port 1 or port 2.
 A user can only be assigned to a VLAN that is defined on the Network >Ports page.
Only applicable to clients using WPA or 802.1X. (Not applicable to MAC authentication.)

Note
A VLAN that is assigned to a user overrides a VLAN assigned by a VSC or by the default
VLAN.
For more information see
5-8
Port configuration on page
Configuring user accounts on a RADIUS server on page
5-4.
6-5.