Sample Avlan Configuration - Alcatel OmniSwitch 6624 Network Configuration Manual

Configuring Authenticated VLANs

Sample AVLAN Configuration

1 Enable at least one authenticated VLAN:
-> vlan 2 authentication enable
Note that this command does not create a VLAN; the VLAN must already be created. For information
about creating VLANs, see
The VLAN must also have a router port if Telnet or Web browser clients will be authenticating into this
VLAN. The following command configures a router port on VLAN 2:
-> vlan 2 router ip 10.10.2.20
2 Create and enable at least one mobile authenticated port. The port must be in VLAN 1, the default
VLAN on the switch.
-> vlan port mobile 3/1
-> vlan port 3/1 authenticate enable
3
Set up a DNS path if users will be authenticating through a Web browser:
-> aaa avlan dns auth.company
4
Set up a path to a DHCP server if users will be getting IP addresses from DHCP. The IP helper address
is the IP address of the DHCP server; the AVLAN default DHCP address is the address of any router port
configured on the VLAN.
-> ip helper address 10.10.2.5
-> aaa avlan default dhcp 10.10.2.20
If the relay will be used for authentication only, enter the
-> ip helper avlan only
Note. To check the DNS and DHCP authentication configuration, enter the
command. For example:
-> show aaa avlan config
default DHCP relay address = 192.9.33.222
authentication DNS name
For more information about this command, see the OmniSwitch CLI Reference Guide.
5 Configure the switch to communicate with the authentication servers. Use the
aaa ldap-server command. For example:
-> aaa radius-server rad1 host 10.10.1.2 key wwwtoe timeout 3
-> aaa ldap server ldap2 host 199.1.1.1 dn manager password foo base c=us
See Chapter 17, "Managing Authentication Servers,"
ers for authentication.
OmniSwitch 6624/6648 Network Configuration Guide
Chapter 4, "Configuring VLANs."
= authent.company.com
April 2004
AVLAN Configuration Overview
ip helper avlan only
show aaa avlan config
for more information about setting up external serv-
command:
aaa radius-server or
page 18-5