Multiple Vlan assigment in Free radius server with Cisco Nexus Switch.

[Brian Turnbow]

Hi Deepak

Dynamic assignment works
Multiple vlans work  with multiple users when sending each user one vlan
Having one user assigned multiple vlans, which was your original request,   is not possible on this switch ,or if  there is some way to it it is not documented anywhere.
They are data center switches not access switches,  and do not even support the use of a voice vlan as a second vlan on the port, nor guest vlans etc.
Nothing you can do in freeradius will change that.

Brian



From: deepak rawat <deepakrawat.singh at yahoo.com>
Sent: Monday, December 13, 2021 12:33 PM
To: Brian Turnbow <b.turnbow at twt.it>; FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Subject: Re: Multiple Vlan assigment in Free radius server with Cisco Nexus Switch.

Hi,
What made you to comment this because dynamic vlan assignment is working in our case and Cisco is giving the vlan to the port as per input from radius server but yes not giving multiple vlan or I think I am giving the inputs in incorrect way. If you can tell me the correct format then I can try it.
We raised the Cisco TAC case as well and they said they can provide multiple tunnel vlan.

Maybe I misunderstood what you mean or I did it find exact words in document which you pointed
Thanks


Sent from Yahoo Mail for iPhone<https://overview.mail.yahoo.com/?.src=iOS>

On Monday, December 13, 2021, 12:03 PM, Brian Turnbow <b.turnbow at twt.it<mailto:b.turnbow at twt.it>> wrote:
Hi

> Hi,
> Thanks for the reply,
> We have a Nexus 3548-X Cisco Switch and as per cisco it support the Multiple
> Vlan.


Nexxus 3000 series support multiple vlans, but  not assigning multiple vlan to users from radius under 802.1x
The Nexus 3000 is very limted here, please see the restrictions section in the guide.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/security/93x/b-cisco-nexus-3000-nx-os-security-configuration-guide-93x/b-cisco-nexus-3000-nx-os-security-configuration-guide-93x_chapter_01101.html#con_1379620

Unless there is some secret undocumented magic that I am unaware of, it is cisco....

Brian