Extreme Networks ExtremeWare XOS 11.3, Manual

Page: 357 / 698

Authenticating Users
ExtremeWare XOS 11.3 Concepts Guide
357
Specifying a Destination VLAN
If you configure a local netlogin account with a destination VLAN, upon successful authentication, the
client transitions to the permanent, destination VLAN. You can specify the destination VLAN when you
initially create the local netlogin account or at a later time.
Adding VLANs when Creating a Local Netlogin Account. To specify the destination VLAN when creating
the local netlogin account, use the following command and specify the
vlan-vsa
option with the
associated parameters:
create netlogin local-user <user-name> {encrypted <password>} {vlan-vsa [[{tagged |
untagged} [<vlan_name>] | <vlan_tag>]]}
Where the following is true:
●
tagged
—Specifies that the client be added as tagged
●
untagged
—Specifies that the client be added as untagged
●
vlan_name
—Specifies the name of the destination VLAN
●
vlan_tag
—Specifies the VLAN ID, tag, of the destination VLAN
The following example:
●
Creates a new local netlogin user name
●
Creates a password associated with the local netlogin user name
●
Adds the VLAN test1 as the destination VLAN
The following is a sample display from this command:
create netlogin local-user megtest vlan-vsa "test1"
password: <Enter the password. The switch does not display the password.>
Reenter password: <Re-enter the password. The switch does not display the password.>
Adding VLANs at a Later Time. To specify the destination VLAN after you created the local netlogin
account, use the following command:
configure netlogin local-user <user-name> {vlan-vsa [[{tagged | untagged}
[<vlan_name>] | <vlan_tag>]] | none]}
Where the following is true:
●
tagged
—Specifies that the client be added as tagged
●
untagged
—Specifies that the client be added as untagged
●
vlan_name
—Specifies the name of the destination VLAN
●
vlan_tag
—Specifies the VLAN ID, tag, of the destination VLAN
●
none
—Specifies that the VSA 211 wildcard (*) is applied, only if you do not specify tagged or
untagged
The following example:
●
Modifies a previously created local netlogin account
●
Specifies that clients are added as tagged to the VLAN
●
Adds the VLAN blue as the destination VLAN
configure netlogin local-user megtest vlan-vsa tagged "blue"