Administrator Guide

306 Authentication, Authorization, and Accounting
The commands in this example show how to configure the switch to control
VLAN assignment for the example network. This example also contains
commands to configure the uplink, or trunk, port (a port connected to a
router or the internal network), and to configure the downlink, or access,
ports (ports connected to one or more hosts). Ports 1–23 are downstream
ports. Port 24 is an uplink port. An external RADIUS server handles the
VLAN assignment.
NOTE: Dynamic VLAN creation applies only to authorized ports. The VLANs for
unauthorized and guest users must be configured on the switch and cannot be
dynamically created based on RADIUS-based VLAN assignment.
NOTE: RADIUS VLAN assignment is supported on general mode ports only if
MAC-based authentication is enabled. VLAN assignment is supported for all port
modes other than trunk mode if auto assignment is enabled (dot1x port-control
auto).
NOTE: The configuration to control the VLAN assignment for authorized users is
done on the external RADIUS server.