Extreme Networks ExtremeWare 7.7, Command Reference Manual

Page: 917 / 2620

configure security-profile default-user-vlan
ExtremeWare 7.7 Command Reference Guide 917
configure security-profile default-user-vlan
configure security-profile <name> default-user-vlan <vlan> [tagged |
untagged]
Description
Configures the default data VLAN for wireless users.
Syntax Description
Default
The default value for the <vlan> parameter is the wireless management default VLAN.
The default value for tagging is null (for backward compatibility).
Usage Guidelines
Wireless users are placed in the specified default user VLAN parameter after authentication when any
of the following conditions is true:
• The
use-dynamic-vlan
variable in the security profile is set to y (yes), and the RADIUS server is not
configured to push back VSA 203 or 209.
• The switch has a Basic software license (“ i ” series) or an Edge software license (“ e ” series); these
licenses do not support Radius VSAs.
• The
use-dynamic-vlan
variable in the security profile is set to n (no).
Using the [tagged | untagged] Option
Starting with ExtremeWare 7.6, you can specify that the remote connect Altitude 300 AP will send user
traffic tagged or untagged. If neither option is specified explicitly, user traffic is sent tagged.
By default, a remote connect Altitude 300 AP sends user traffic tagged. If the remote connect Altitude
300 AP is connected to the rest of the network through an edge switch that does not have the VLAN tag
defined, the edge switch will drop this user traffic, since the VLAN tag is unknown. To handle this
situation, you can set the
untagged
option.
You do not need to explicitly specify the
tagged | untagged
option for a direct connect Altitude 300
AP. A direct connect Altitude 300 AP sends wireless user traffic untagged if the user VLAN configured
is the same as the wireless management VLAN. The Altitude 300 AP tags the user traffic if the user
VLAN configured is different from wireless management VLAN.
name Specifies the name of the security profile.
vlan Specifies the name of the default VLAN for wireless users.
tagged Specifies that the Altitude 300 access point (AP) should send the wireless user traffic tagged.
NOTE: This option applies only to remote connect Altitude 300 APs in Summit 300-48 switches.
untagged Specifies that the Altitude 300 AP should send the wireless user traffic untagged.
NOTE: This option applies only to remote connect Altitude 300 APs in Summit 300-48 switches.