Nortel Networks 2300 manual Overriding AAA-Assigned VLANs

476Configuring AAA for Network Users

Overriding AAA-Assigned VLANs

The following example shows how to change the VLAN access of wireless users in an organization housed in multiple buildings.

Suppose the wireless users on the faculty of a college English department have offices in building A and are authorized to use that building’s bldga-prof-VLANs. These users also teach classes in building B. Because you do not want to tunnel these users back to building A from building B when they use their wireless laptops in class, you configure the location policy on the WSS switch to redirect them to the bldgb-engVLAN.

You also want to allow writing instructors normally authorized to use any -techcommVLAN in the college to access the network through the bldgb-engVLAN when they are in building B.

1Redirect bldga-prof-VLAN users to the VLAN bldgb-eng:

23x0# set location policy permit vlan bldgb-eng if vlan eq bldga-prof-*

2Allow writing instructors from -techcommVLANs to use the bldgb-engVLAN:

23x0# set location policy permit vlan bldgb-eng if vlan eq *-techcomm

3Display the configuration:

23x0# show location policy Id Clauses

-----------------------------------------------------

1)permit vlan bldgb-teach if vlan eq bldga-prof-*

2)permit vlan bldgb-eng if vlan eq *-techcomm

4Save the configuration:

WSS-20save config

success: configuration saved.

320657-A