DELL S3148P with OS9 - Egress-VLANID-Support?
Hello! I'm trying to find out, if the DELL switch S3148P with OS9 (9.14.2.23) supports dynamically setting of tagged VLAN-IDs. Setting the untagged VLAN-ID with "Tunnel-Private-Group-Id" attribute works. I tried setting the tagged (and untagged) VLAN-IDs with the "Egress-VLANID" attribute, but without success. This still can be a configuration problem on my side. If I execute the "show vlan" command, I see the following: ASW01# show vlan Codes: * - Default VLAN, G - GVRP VLANs, R - Remote Port Mirroring VLANs, P - Primary, C - Community, I - Isolated O - Openflow, Vx - Vxlan Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged o - OpenFlow untagged, O - OpenFlow tagged G - GVRP tagged, M - Vlan-stack i - Internal untagged, I - Internal tagged, v - VLT untagged, V - VLT tagged NUM Status Description Q Ports * 1 Active U Po49(Te 1/49) U Gi 1/48 U Gi 2/1,2/14,2/16-2/17,2/19-2/22,2/24,2/38-2/39,2/41-2/45,2/48 1004 Active ANS-LAN-WLMGM01 T Po49(Te 1/49) x Gi 2/44 <------ HERE 1053 Active LAN-ZUK02 T Po49(Te 1/49) In this case (HERE) the untagged VLAN was correctly set via Radius. If you take a look at the legend above, you will see: x - Dot1x untagged, X - Dot1x tagged So, I suspect in general the assigning of untagged AND tagged is supported. Because I cannot find any further information in the internet, I hope some user here can help me... Regards Sven
Thanks for the try, but I explicitly asked for "tagged" support. The document only covers the untagged case with RADIUS attribute 81 (Tunnel-Private-Group-ID), which I got working. Hopefully somebody already tried to set "tagged VLANs" via Radius on this type of switch?! Regards Sven ________________________________ Von: Freeradius-Users <freeradius-users-bounces+sven.anders=if-tech.de@lists.freeradius.org> im Auftrag von marki via Freeradius-Users <freeradius-users@lists.freeradius.org> Gesendet: Dienstag, 12. August 2025 09:17 An: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc: marki <jm+freeradiususer@roth.lu> Betreff: Re: DELL S3148P with OS9 - Egress-VLANID-Support? Configuration Guide for S3100 series, 802.1x <https://www.dell.com/support/manuals/fr-lu/dell-emc-os-9/s3100-9.14.2.4-config/configuring-dynamic-vlan-assignment-with-port-authentication?guid=guid-6999147a-28c1-457f-87bd-020624264770&lang=en-us> - List info/subscribe/unsubscribe? See http://atpscan.global.hornetsecurity.com?d=wic9C1HV82riOK0fVo-oHseCNWg_f85YQ...
I already used it on HP procurve switches. I think I had to set Ingress-Filters attribute too. I tried to use Egress-Vlans on meraki without success, so it does not work on every vendors. Regards, Cordialement, [cid:f86de070-3371-438a-bb71-cbef4233c8ce] Ludovic SENECAUX INGENIEUR RESEAUX DIRECTION DES SYSTÈMES D'INFORMATION ET DU NUMÉRIQUE PÔLE SOLUTIONS NUMÉRIQUES SERVICE INFRASTRUCTURES +33 (0)3 59 73 52 08 +33 (0)6 86 25 88 36 [cid:f35769a4-b11f-450a-9cf9-225675f34ed1]<https://outlook.office.com/bookwithme/user/60eca674e9254517b00c64b0fd72b6d8@lenord.fr?anonymous&ep=signature> Réservez un créneau pour en discuter.<https://outlook.office.com/bookwithme/user/60eca674e9254517b00c64b0fd72b6d8@lenord.fr?anonymous&ep=signature> Book a slot to discuss.<https://outlook.office.com/bookwithme/user/60eca674e9254517b00c64b0fd72b6d8@lenord.fr?anonymous&ep=signature> [cid:8922cfb8-d878-4fd7-96b3-3fb6d4c5a490]<https://teams.microsoft.com/l/meetup-join/19%3ameeting_NzBiZWJhMmQtMTNmYS00ODVkLWJkMjktOWI4N2ZiZjkxZmRi%40thread.v2/0?context=%7b%22Tid%22%3a%229397aa32-0b7d-4c31-99bd-ca65a7779139%22%2c%22Oid%22%3a%22a343122c-d871-4515-9a52-b4c37e06411d%22%7d> Contactez moi via Teams.<https://teams.microsoft.com/l/meetup-join/19%3ameeting_NzBiZWJhMmQtMTNmYS00ODVkLWJkMjktOWI4N2ZiZjkxZmRi%40thread.v2/0?context=%7b%22Tid%22%3a%229397aa32-0b7d-4c31-99bd-ca65a7779139%22%2c%22Oid%22%3a%22a343122c-d871-4515-9a52-b4c37e06411d%22%7d> Ping me on Teams.<https://teams.microsoft.com/l/meetup-join/19%3ameeting_NzBiZWJhMmQtMTNmYS00ODVkLWJkMjktOWI4N2ZiZjkxZmRi%40thread.v2/0?context=%7b%22Tid%22%3a%229397aa32-0b7d-4c31-99bd-ca65a7779139%22%2c%22Oid%22%3a%22a343122c-d871-4515-9a52-b4c37e06411d%22%7d> ________________________________ De : Freeradius-Users <freeradius-users-bounces+ludovic.senecaux=lenord.fr@lists.freeradius.org> de la part de Sven Anders via Freeradius-Users <freeradius-users@lists.freeradius.org> Envoyé : mardi 12 août 2025 10:30 À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc : Sven Anders <sven.anders@if-tech.de> Objet : AW: DELL S3148P with OS9 - Egress-VLANID-Support? Thanks for the try, but I explicitly asked for "tagged" support. The document only covers the untagged case with RADIUS attribute 81 (Tunnel-Private-Group-ID), which I got working. Hopefully somebody already tried to set "tagged VLANs" via Radius on this type of switch?! Regards Sven ________________________________ Von: Freeradius-Users <freeradius-users-bounces+sven.anders=if-tech.de@lists.freeradius.org> im Auftrag von marki via Freeradius-Users <freeradius-users@lists.freeradius.org> Gesendet: Dienstag, 12. August 2025 09:17 An: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc: marki <jm+freeradiususer@roth.lu> Betreff: Re: DELL S3148P with OS9 - Egress-VLANID-Support? Configuration Guide for S3100 series, 802.1x <https://m365.eu.vadesecure.com/safeproxy/v4?f=pNgFce7e_knueCM2c2UE7t4wZUDm3ItaufavHrg_FS0WYg9SfSxWlar2lplKmZiGCXCNJmGzc2UTGQHBLYVYxs_bl2BBEhApOb_4k9x0ItqcrkZZGZL7gxwlZ-ImC13m&i=JAlqgBvC2KCEGgb_d9R6qzaphPzbKTzYarKgSCooshCgurRD-YfCwXITDNiCcf1wInQ9r28dM9vdlViLm8qeGQ&k=QJMF&r=u2Tn1Ah17-U2HLUxSKx7CGrKsy_c525ZhJSKBHmijD_8S1iFgCuPe-XVR-VsEcN3&s=5010c26fe2a89d094e0e6c3d5d195878a2aa3d5e3eb367600e06ef6eb0626f11&u=https%3A%2F%2Fwww.dell.com%2Fsupport%2Fmanuals%2Ffr-lu%2Fdell-emc-os-9%2Fs3100-9.14.2.4-config%2Fconfiguring-dynamic-vlan-assignment-with-port-authentication%3Fguid%3Dguid-6999147a-28c1-457f-87bd-020624264770%26lang%3Den-us> - List info/subscribe/unsubscribe? See https://m365.eu.vadesecure.com/safeproxy/v4?f=U8yIixfelhgU0Zp-w1E-1thW4G89Ew... - List info/subscribe/unsubscribe? See https://m365.eu.vadesecure.com/safeproxy/v4?f=ZSK2niPEW2FQH5uyj1AUetLTwBh72U...
On Aug 12, 2025, at 4:30 AM, Sven Anders via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Thanks for the try, but I explicitly asked for "tagged" support. The document only covers the untagged case with RADIUS attribute 81 (Tunnel-Private-Group-ID), which I got working.
Hopefully somebody already tried to set "tagged VLANs" via Radius on this type of switch?!
This is the FreeRADIUS list. Questions here should be about FreeRADIUS. There are 1000 different manufacturers, and 10,000 different models of switches and routers. If everyone asked generic switch / router questions here, the list wouldn't have any FreeRADIUS content. So you should ask Dell how their switches work. Or, find a generic IT / ISP forum, and ask there. Alan DeKok.
Hello Alan, I understand you and asking here is my last resort, because DELL itself could not help (but the customer is still using it) and could not find any specific forum for it. Therefore, because I'm using the wildly used FreeRadius on the other side, I hoped somebody could give me a hint here. If somebody knows another - more appropriate - forum or mailing list, I'll happily will ask there... Sorry for the noise, but this is/was my last hope... Regards Sven ________________________________ Von: Alan DeKok <aland@deployingradius.com> Gesendet: Dienstag, 12. August 2025 12:43 An: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc: Sven Anders <sven.anders@if-tech.de> Betreff: Re: DELL S3148P with OS9 - Egress-VLANID-Support? On Aug 12, 2025, at 4:30 AM, Sven Anders via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Thanks for the try, but I explicitly asked for "tagged" support. The document only covers the untagged case with RADIUS attribute 81 (Tunnel-Private-Group-ID), which I got working.
Hopefully somebody already tried to set "tagged VLANs" via Radius on this type of switch?!
This is the FreeRADIUS list. Questions here should be about FreeRADIUS. There are 1000 different manufacturers, and 10,000 different models of switches and routers. If everyone asked generic switch / router questions here, the list wouldn't have any FreeRADIUS content. So you should ask Dell how their switches work. Or, find a generic IT / ISP forum, and ask there. Alan DeKok.
On Aug 12, 2025, at 8:54 AM, Sven Anders <sven.anders@if-tech.de> wrote:
I understand you and asking here is my last resort, because DELL itself could not help (but the customer is still using it) and could not find any specific forum for it. Therefore, because I'm using the wildly used FreeRadius on the other side, I hoped somebody could give me a hint here. If somebody knows another - more appropriate - forum or mailing list, I'll happily will ask there... Sorry for the noise, but this is/was my last hope...
In general, the vendor documentation should describe its functionality. If it doesn't throw the product in the garbage, and buy one that comes with documentation. Another good rule is also to test functionality. If the functionality doesn't work, then it doesn't work. No amount of poking FreeRADIUS will make switch suddenly gain functionality. If neither of those options work, then you're stuck. Alan DeKok.
hi, not sure of that Egress-VLANID setting , dont you need to define the tunnel-type and medium-type for the interface? Tunnel-Type = 13, Tunnel-Medium-Type = 6, Tunnel-Private-Group-ID = "XYZ" though since this is a dell switch , dynamic assignment is either broken or doesnt work - check your firmware and release notes etc... in which case all you can do is authenticate ports using 802.1X but only to whatever is already configured on the switch (here's where I feel a nice hack using either a script or SNMP to send a port configuration to the device....) alan
participants (5)
-
Alan Buxey -
Alan DeKok -
marki -
SENECAUX Ludovic -
Sven Anders