Configuring Dynamic VLAN Assignment with RADIUS Authentication 171

 

primary authentication 10.110.91.164

 

key authentication aabbcc

 

server-type extended

 

user-name-format with-domain

 

quit

 

#

 

domain cams

 

scheme radius-scheme cams

Precautions

The Telnet user needs to enter the username with the domain name cams, in the

 

format userid@cams, so that the user is authenticated according to the

 

configuration of the domain cams.

 

 

Configuring Dynamic

With the dynamic VLAN assignment function, a switch can dynamically assign an

VLAN Assignment

authenticated user to a specific VLAN according to the attributes issued by the

with RADIUS

RADIUS server, thus restricting the user to specific network resources.

Authentication

 

Network Diagram

Figure 44 Network diagram for configuring dynamic VLAN assignment with RADIUS

 

authentication

Update server

Authentication server

Eth1/0/1

Eth1/0/4

VLAN 10

VLAN 2

 

Eth1/0/3

Eth1/0/2

VLAN 100

VLAN 1

 

Internet

Supplicant

Networking and You are required to configure the switch so that users logging into the switch are Configuration authenticated and restricted to specific network resources. The detailed Requirements requirements are as follows:

All users must pass authentication to access the network.

Users can access only VLAN 10 before passing authentication.

Users passing authentication can access VLAN 100.

Applicable Products

Product series

Software version

Hardware version

 

 

 

Switch 5500

Release V03.02.04

All versions

Switch 5500G

Release V03.02.04

All versions

Switch 4500

Release V03.03.00

All versions

Page 171
Image 171
3Com 4200G, 5500G Configuring Dynamic, Vlan Assignment, With Radius, Authentication, Configuration of the domain cams