Extreme Networks ExtremeWare 7.5, Command Reference Manual

Page: 900 / 2546

900 ExtremeWare 7.5 Command Reference Guide
Security Commands
configure security-profile use-dynamic-vlan
configure security-profile <name> use-dynamic-vlan {y | n}
Description
Determines whether or not the security profile uses the dynamic VLAN (VLAN pushed by the RADIUS
server through a VSA (Vendor Specific Attribute)).
Syntax Description
Default
Y (yes)
Usage Guidelines
If the variable is set to
Y
(yes), and if the RADIUS server is configured to push back VSA 203 or 209, the
pushed back VSAs will override the
default-user-vlan
setting. (If both VSAs are configured, then
they must point to the same VLAN.) The user will be placed in the VLAN indicated by the VSA after
authentication.
If the variable is set to
N
(no), the user will be placed in the VLAN indicated by
default-user-vlan
regardless of any VSAs from the RADIUS server.
NOTE
In systems with the Basic software license (“i” series) or Edge software license (“e” series), users are
placed in the VLAN indicated default-user-vlan, regardless of the VSAs pushed back from the RADIUS
server.
Use the following command to configure the
default-user-vlan
:
configure security-profile <name> default-user-vlan <vlan>
Example
The following example sets the security profile called open-profile to use the dynamic VLAN:
configure security-profile open-profile use-dynamic-vlan y
History
This command was first available in ExtremeWare 6.2a. It was added to the “ e ” series in 7.3e and to the
“ i ” series in 7.3.0.
name Specifies the names of the security profile.
y Specifies yes, to use the dynamic VLAN. The default is y (yes).
n Specifies no, not to use the dynamic VLAN.