<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><DIV>Here is exactly the part of the documentation relative dynamique vlan-assignment through radius authentication :</DIV>
<H3 style="MARGIN-LEFT: 0cm; TEXT-INDENT: 0cm"><A name=_Toc153341223></A><A name=_Ref135312001></A><A name=_Ref135311972><SPAN lang=EN-US>1.3.5 </SPAN><SPAN lang=EN-US>Configuring Dynamic <SPAN id=trs_hit3><FONT color=red>VLAN Assignment</FONT></SPAN></SPAN></A></H3>
<P class=MsoNormal><SPAN lang=EN-US>The dynamic <SPAN id=trs_hit4><FONT color=red>VLAN assignment</FONT></SPAN> feature enables a switch to dynamically add the switch ports of successfully authenticated users to different <SPAN id=trs_hit5><FONT color=red>VLANs</FONT></SPAN> according to the attributes assigned by the RADIUS server, so as to control the network resources that different users can access.</SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>Currently, the switch supports the following two types of assigned <SPAN id=trs_hit6><FONT color=red>VLAN</FONT></SPAN> IDs: integer and string.</SPAN></P>
<P class=ItemList><SPAN lang=EN-US style="FONT-SIZE: 6.5pt; COLOR: black; FONT-FAMILY: Wingdings">l<SPAN style="FONT: 7pt 'Times New Roman'"> </SPAN></SPAN><SPAN lang=EN-US>Integer: If the RADIUS authentication server assigns integer type of <SPAN id=trs_hit7><FONT color=red>VLAN</FONT></SPAN> IDs, you can set the <SPAN id=trs_hit8><FONT color=red>VLAN assignment</FONT></SPAN> mode to integer on the switch (this is also the default mode on the switch). Then, upon receiving an integer ID assigned by the RADIUS authentication server, the switch adds the port to the <SPAN id=trs_hit9><FONT color=red>VLAN</FONT></SPAN> whose <SPAN id=trs_hit10><FONT color=red>VLAN</FONT></SPAN> ID is equal to the assigned integer ID. If no such a <SPAN id=trs_hit11><FONT color=red>VLAN</FONT></SPAN> exists, the switch first creates a <SPAN id=trs_hit12><FONT color=red>VLAN</FONT></SPAN> with the assigned ID, and
then adds the port to the newly created <SPAN id=trs_hit13><FONT color=red>VLAN</FONT></SPAN>.</SPAN></P>
<P class=ItemList><SPAN lang=EN-US style="FONT-SIZE: 6.5pt; COLOR: black; FONT-FAMILY: Wingdings">l<SPAN style="FONT: 7pt 'Times New Roman'"> </SPAN></SPAN><SPAN lang=EN-US>String: If the RADIUS authentication server assigns string type of <SPAN id=trs_hit14><FONT color=red>VLAN</FONT></SPAN> IDs, you can set the <SPAN id=trs_hit15><FONT color=red>VLAN assignment</FONT></SPAN> mode to string on the switch. Then, upon receiving a string ID assigned by the RADIUS authentication server, the switch compares the ID with existing <SPAN id=trs_hit16><FONT color=red>VLAN</FONT></SPAN> names on the switch. If it finds a match, it adds the port to the corresponding <SPAN id=trs_hit17><FONT color=red>VLAN</FONT></SPAN>. Otherwise, the <SPAN id=trs_hit18><FONT color=red>VLAN assignment</FONT></SPAN> fails and the user fails the authentication.</SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>In actual applications, to use this feature together with Guest <SPAN id=trs_hit19><FONT color=red>VLAN</FONT></SPAN>, you should better set port control to port-based mode.</SPAN></P>
<P class=TableDescription style="TEXT-INDENT: 0cm"><B><SPAN lang=EN-US>Table 1-9 </SPAN></B><SPAN lang=EN-US>Configure dynamic <SPAN id=trs_hit20><FONT color=red>VLAN assignment</FONT></SPAN></SPAN></P>
<DIV>
<TABLE class=Table style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; MARGIN-LEFT: 63.2pt; BORDER-LEFT: medium none; WIDTH: 376.15pt; BORDER-BOTTOM: medium none; BORDER-COLLAPSE: collapse" cellSpacing=0 cellPadding=0 width=502 border=1>
<THEAD>
<TR style="page-break-inside: avoid">
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: windowtext 1pt solid; PADDING-LEFT: 5.4pt; BACKGROUND: #d9d9d9; PADDING-BOTTOM: 0cm; BORDER-LEFT: windowtext 1pt solid; WIDTH: 126.65pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableHeading><A name=_Toc60313604></A><A name=_Toc44232642><SPAN lang=EN-US>Operation</SPAN></A></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: windowtext 1pt solid; PADDING-LEFT: 5.4pt; BACKGROUND: #d9d9d9; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableHeading><SPAN lang=EN-US>Command</SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: windowtext 1pt solid; PADDING-LEFT: 5.4pt; BACKGROUND: #d9d9d9; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableHeading><SPAN lang=EN-US>Description</SPAN></P></TD></TR></THEAD>
<TBODY>
<TR style="page-break-inside: avoid">
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: windowtext 1pt solid; WIDTH: 126.65pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableTextChar><SPAN lang=EN-US>Enter system view</SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableText><B><SPAN lang=EN-US>system-view</SPAN></B></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableTextChar><SPAN lang=EN-US>—</SPAN></P></TD></TR>
<TR style="page-break-inside: avoid">
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: windowtext 1pt solid; WIDTH: 126.65pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableTextChar><SPAN lang=EN-US>Create an ISP domain and enter its view</SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableTextChar><SPAN class=TableTextChar2><B><SPAN lang=EN-US>domain</SPAN></B></SPAN><SPAN lang=EN-US> </SPAN><SPAN class=TableTextChar2><SPAN lang=EN-US>isp-name</SPAN></I></SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid" width=169>
<P class=TableTextChar><SPAN lang=EN-US>—</SPAN></P></TD></TR>
<TR style="HEIGHT: 17.55pt; page-break-inside: avoid">
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: windowtext 1pt solid; WIDTH: 126.65pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 17.55pt" width=169>
<P class=TableTextChar><SPAN lang=EN-US>Set the <SPAN id=trs_hit21><FONT color=red>VLAN assignment</FONT></SPAN> mode</SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 17.55pt" width=169>
<P class=TableTextChar><SPAN class=TableTextChar2><B><SPAN lang=EN-US><SPAN id=trs_hit22><FONT color=red>vlan</FONT></SPAN>-<SPAN id=trs_hit23><FONT color=red>assignment</FONT></SPAN>-mode</SPAN></B></SPAN><SPAN lang=EN-US> { </SPAN><SPAN class=TableTextChar2><B><SPAN lang=EN-US>integer</SPAN></B></SPAN><SPAN lang=EN-US> | </SPAN><SPAN class=TableTextChar2><B><SPAN lang=EN-US>string</SPAN></B></SPAN><SPAN lang=EN-US> }</SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 17.55pt" width=169>
<P class=TableTextChar><SPAN lang=EN-US>Optional</SPAN></P>
<P class=TableTextChar><SPAN lang=EN-US>By default, the <SPAN id=trs_hit24><FONT color=red>VLAN assignment</FONT></SPAN> mode is integer.</SPAN></P></TD></TR>
<TR style="HEIGHT: 26.6pt; page-break-inside: avoid">
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: windowtext 1pt solid; WIDTH: 126.65pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 26.6pt" width=169>
<P class=TableTextChar><SPAN lang=EN-US>Create a <SPAN id=trs_hit25><FONT color=red>VLAN</FONT></SPAN> and enter its view</SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 26.6pt" width=169>
<P class=TableTextChar><SPAN class=TableTextChar2><B><SPAN lang=EN-US><SPAN id=trs_hit26><FONT color=red>vlan</SPAN></B></SPAN><SPAN lang=EN-US> </SPAN><SPAN class=TableTextChar2><SPAN lang=EN-US>vlan</FONT></SPAN>-id</SPAN></I></SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 26.6pt" width=169>
<P class=TableTextChar><SPAN lang=EN-US>—</SPAN></P></TD></TR>
<TR style="HEIGHT: 26.6pt; page-break-inside: avoid">
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: windowtext 1pt solid; WIDTH: 126.65pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 26.6pt" width=169>
<P class=TableTextChar><SPAN lang=EN-US>Set a <SPAN id=trs_hit27><FONT color=red>VLAN</FONT></SPAN> name for <SPAN id=trs_hit28><FONT color=red>VLAN assignment</FONT></SPAN></SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 26.6pt" width=169>
<P class=TableTextChar><SPAN class=TableTextChar2><B><SPAN lang=EN-US>name</SPAN></B></SPAN><SPAN lang=EN-US> </SPAN><SPAN class=TableTextChar2><SPAN lang=EN-US>string</SPAN></I></SPAN></P></TD>
<TD style="BORDER-RIGHT: windowtext 1pt solid; PADDING-RIGHT: 5.4pt; BORDER-TOP: medium none; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: medium none; WIDTH: 126.7pt; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid; HEIGHT: 26.6pt" width=169>
<P class=TableTextChar><SPAN lang=EN-US>This operation is required if the <SPAN id=trs_hit29><FONT color=red>VLAN assignment</FONT></SPAN> mode is set to string.</SPAN></P></TD></TR></TBODY></TABLE></DIV>
<P class=MsoNormal><SPAN lang=EN-US> </SPAN></P>
<DIV style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0cm; BORDER-TOP: windowtext 1pt solid; PADDING-LEFT: 0cm; PADDING-BOTTOM: 0cm; MARGIN-LEFT: 2cm; BORDER-LEFT: medium none; MARGIN-RIGHT: 0cm; PADDING-TOP: 5pt; BORDER-BOTTOM: medium none">
<P class=NotesHeading style="MARGIN-LEFT: 0cm"><SPAN lang=EN-US><IMG height=25 src="file:///E:/trshome/outfiles/3116A04W-Operation%20Manual-Release%201510(V1.04_01)/20-AAA-RADIUS-HWTACACS-EAD%20Operation.files/image007.gif" width=28 border=0> Caution:</SPAN></P></DIV>
<DIV style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0cm; BORDER-TOP: medium none; PADDING-LEFT: 0cm; PADDING-BOTTOM: 10pt; MARGIN-LEFT: 2cm; BORDER-LEFT: medium none; MARGIN-RIGHT: 0cm; PADDING-TOP: 0cm; BORDER-BOTTOM: windowtext 1pt solid">
<P class=NotesTextList style="MARGIN-LEFT: 14.2pt"><SPAN lang=EN-US style="FONT-SIZE: 6.5pt; FONT-FAMILY: Wingdings">l<SPAN style="FONT: 7pt 'Times New Roman'"> </SPAN></SPAN><SPAN lang=EN-US>In string mode, if the <SPAN id=trs_hit30><FONT color=red>VLAN</FONT></SPAN> ID assigned by the RADIUS server is a character string containing only digits (for example, 1024), the switch first regards it as an integer <SPAN id=trs_hit31><FONT color=red>VLAN</FONT></SPAN> ID: the switch transforms the string to an integer value and judges if the value is in the valid <SPAN id=trs_hit32><FONT color=red>VLAN</FONT></SPAN> ID range; if it is, the switch adds the authenticated port to the <SPAN id=trs_hit33><FONT color=red>VLAN</FONT></SPAN> with the integer value as the <SPAN id=trs_hit34><FONT color=red>VLAN</FONT></SPAN> ID (<SPAN id=trs_hit35><FONT color=red>VLAN</FONT></SPAN> 1024, for example).</SPAN></P>
<P class=NotesTextList style="MARGIN-LEFT: 14.2pt"><SPAN lang=EN-US style="FONT-SIZE: 6.5pt; FONT-FAMILY: Wingdings">l<SPAN style="FONT: 7pt 'Times New Roman'"> </SPAN></SPAN><SPAN lang=EN-US>To implement dynamic <SPAN id=trs_hit36><FONT color=red>VLAN assignment</FONT></SPAN> on a port where both MSTP and 802.1x are enabled, you must set the MSTP port to an edge port.</SPAN></P></DIV>
<P> </P>
<P> </P>
<P>Thanks </P>
<DIV><BR></DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><BR>
<DIV style="FONT-SIZE: 13px; FONT-FAMILY: arial, helvetica, sans-serif"><FONT face=Tahoma size=2>
<HR SIZE=1>
<B><SPAN style="FONT-WEIGHT: bold">De :</SPAN></B> Ivan Kalik <tnt@kalik.net><BR><B><SPAN style="FONT-WEIGHT: bold">À :</SPAN></B> FreeRadius users mailing list <freeradius-users@lists.freeradius.org><BR><B><SPAN style="FONT-WEIGHT: bold">Envoyé le :</SPAN></B> Mardi, 23 Juin 2009, 10h51mn 15s<BR><B><SPAN style="FONT-WEIGHT: bold">Objet :</SPAN></B> Re: Re : Re : Re : Radius+Huwaei switch + auto VLan Assignment issue<BR></FONT><BR>> The Switch documentation said:<BR>><BR>> If set to Integer the Vlan-assignment-mode allow the switch to use VLAN ID<BR>> to tag frames.<BR>><BR>> If set to String it uses VLAN Name instead.<BR>> <BR>> So the Vlan-assignment-mode in the domain is Integer. But as the<BR>> Access-Accept message return<BR>><BR>> Vlan ID in this format :<BR>><BR>> Tunnel-Private-Group-Id:0 = "2"<BR>><BR>> It
seems we'd better set Vlan-assignment-mode to string.<BR><BR>How sure are you that your switch supports dynamic VLAN assignment (via<BR>radius not console)? Does it say that anywhere in the documentation?<BR><BR>Ivan Kalik<BR>Kalik Informatika ISP<BR><BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html" target=_blank>http://www.freeradius.org/list/users.html</A></DIV></DIV></div><br>
</body></html>