Huawei Quidway S8500 Series, Руководство по управлению

Страница: 907 / 1341

Command Manual – Security
Quidway S8500 Series Routing Switches Chapter 2 AAA and RADIUS/HWTACACS Protocol
Configuration Commands
Huawei Technologies Proprietary
2-21
[Quidway-luser-huawei1] state block
2.1.21 vlan-assignment-mode
Syntax
vlan-assignment-mode
{
integer
|
string
}
View
ISP domain view
Parameter
integer
: Specify the VLAN delivery mode to be integer.
string
: Specify the VLAN delivery mode to be string.
Description
Use the
vlan-assignment-mode
command to specify the VLAN delivery mode (integer
or string).
By default, the
integer
mode is used, that is, the switch supports the RADIUS server
delivering VLAN IDs in integer form.
Dynamic VLAN delivering aims to control the network resources available to a user.
With this function enabled, a switch adds the ports connecting to authenticated users to
specified VLANs according to the attribute values delivered by the RADIUS server. In
actual use, ports are usually set to operate in port-based mode in order to work together
with Guest VLAN. A port operating in MAC address-based mode can only have one
host connected to it. Currently, the VLAN IDs delivered by RADIUS servers can be of
integer or string type.
z
As for a VLAN ID that is of integer type, a switch adds the port to the
corresponding VLAN according to the VLAN ID delivered by the RADIUS
authentication server. If the VLAN does not exist, the switch creates the VLAN first
and then adds the port to the VLAN.
z
As for a VLAN ID that is of string type, a switch compares the VLAN ID delivered
by the RADIUS authentication server with the names of the VLANs existing on the
switch. If a matching entry is found, the switch adds the port into the corresponding
VLAN. Otherwise, the delivery fails and the user fails to pass the authentication.