Enterasys Enterasys SecureStack B2 B2G124-24 Specifikace Strana 571

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 600
  • Tabulka s obsahem
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků
Zobrazit stránku 570
set vlanauthorization
SecureStack B2 Configuration Guide 19-47
Whenausersuccessfullyauthenticatestothenetwork,theRADIUSserverreturnsanAccess
Acceptframe.Thisframecanhavemanyattributes,twoofwhichareaFilterID(whichishow
policyassignmentisachieved)andRFC3580VLANassignment.
Ifaswitchisintunnelmode:
•TheFID(FilterID)
isalwaysignored,butDefaultpolicyrulesstillapply.
•TheVLANattributeisusedifpresent,andifVLANauthorization isenabled.Seeset
vlanauthorizationonpage 1947.
Ifaswitchisinpolicymode:
•IftheAccessAcceptframehastheFIDattributeonly,thentheFIDisused.
•If
theAccessAcceptframehastheVLANattributeonly,thenitisusedprovidedthatVLAN
authorizationisenabled.Seesetvlanauthorizationonpage 1947.
•Ifbothattributesarereturned,usetheFIDonly.
Examples
Thisexampleshowshowtosetthepolicymaptableresponsetotunnel:
B2(rw)-> set policy maptable response tunnel
set vlanauthorization
EnableordisabletheuseoftheRADIUSVLANtunnelattributetoputaportintoaparticular
VLANbasedontheresultofauthentication.
Syntax
set vlanauthorization {enable | disable} [port-string]
Parameters
Defaults
VLANauthenticationisdisabledbydefault.
Mode
Switchcommand,readwrite.
Examples
ThisexampleshowshowtoenableVLANauthenticationforallGigabitEthernetports:
B2(rw)-> set vlanauthorization enable ge.*.*
ThisexampleshowshowtodisableVLANauthenticationforallGigabitEthernetportsonswitch
unit/module 3:
B2(rw)-> set vlanauthorization disable ge.3.*
enable|disable Enablesordisablesvlanauthorization/tunnelattributes.
portstring (Optional)SpecifieswhichportstoenableordisabletheuseofVLAN
tunnelattributes/authorization.Foradetaileddescriptionofpossibleport
stringvalues,refertoPortStringSyntaxUsedintheCLIonpage 72.
Zobrazit stránku 570
1 2 ... 566 567 568 569 570 571 572 573 574 575 576 ... 599 600

Komentáře k této Příručce

Žádné komentáře