Switch User Manual

set vlanauthorization
26-50 Authentication and Authorization Configuration
set vlanauthorization
EnableordisabletheuseoftheRADIUSVLANtunnelattributetoputaportintoaparticular
VLANbasedontheresultofauthentication.
Syntax
set vlanauthorization {enable | disable} [port-string]
Parameters
Defaults
VLANauthenticationisdisabledbydefault.
Mode
Switchcommand,read‐write.
Examples
ThisexampleshowshowtoenableVLANauthenticationforallGigabitEthernetports:
C3(rw)-> set vlanauthorization enable ge.*.*
ThisexampleshowshowtodisableVLANauthenticationforallGigabitEthernetportsonswitch
unit/module 3:
C3(rw)-> set vlanauthorization disable ge.3.*
set vlanauthorization egress
ControlsthemodificationofthecurrentVLANegresslistof802.1xauthenticatedportsforthe
VLANsreturnedintheRADIUSauthorizationfilteridstring.
Syntax
set vlanauthorization egress {none | tagged | untagged} port-string
Parameters
enable|disable Enablesordisablesvlanauthorization/tunnelattributes.
port‐string (Optional)SpecifieswhichportstoenableordisabletheuseofVLAN
tunnelattributes/authorization.Foradetaileddescriptionofpossibleport‐
stringvalues,referto“PortStringSyntaxUsedintheCLI”onpage 7‐1.
none Specifiesthatnoegressmanipulationwillbemade.
tagged Specifiesthattheauthenticatingportwillbeaddedtothecurrenttagged
egressfortheVLAN‐IDreturned.
untagged Specifiesthattheauthenticatingportwillbeaddedtothecurrent
untaggedegressfortheVLAN‐IDreturned(default).
port‐string Specifiesthattheport
orlistofports.towhichthiscommandwillapply.
Foradetaileddescriptionofpossibleport‐stringvalues,referto“Port
StringSyntaxUsedintheCLI”onpage 7‐1.