Enterasys Networks 9034313-07 manual Set vlanauthorization egress, Tagged

set vlanauthorization

set vlanauthorization

Enable or disable the use of the RADIUS VLAN tunnel attribute to put a port into a particular VLAN based on the result of authentication.

Syntax

set vlanauthorization {enable disable} [port-string]

Parameters

enable disable	Enables or disables vlan authorization/tunnel attributes.
port‐string	(Optional) Specifies which ports to enable or disable the use of VLAN
	tunnel attributes/authorization. For a detailed description of possible port‐
	string values, refer to “Port String Syntax Used in the CLI” on page 7‐1.

Defaults

VLAN authentication is disabled by default.

Mode

Switch command, read‐write.

Examples

This example shows how to enable VLAN authentication for all Gigabit Ethernet ports:

C3(rw)-> set vlanauthorization enable ge.*.*

This example shows how to disable VLAN authentication for all Gigabit Ethernet ports on switch unit/module 3:

C3(rw)-> set vlanauthorization disable ge.3.*

set vlanauthorization egress

Controls the modification of the current VLAN egress list of 802.1x authenticated ports for the VLANs returned in the RADIUS authorization filter id string.

Syntax

set vlanauthorization egress {none tagged untagged} port-string

Parameters

none	Specifies that no egress manipulation will be made.
tagged	Specifies that the authenticating port will be added to the current tagged
	egress for the VLAN‐ID returned.
untagged	Specifies that the authenticating port will be added to the current
	untagged egress for the VLAN‐ID returned (default).
port‐string	Specifies that the port or list of ports. to which this command will apply.
	For a detailed description of possible port‐string values, refer to “Port
	String Syntax Used in the CLI” on page 7‐1.

26-50 Authentication and Authorization Configuration