Users Guide

150 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide
Figure 109 - Configure VSA on a RADIUS Server
VLAN Derivation Rule
When an external RADIUS server is used for authentication, the RADIUS server may return a
reply message for authentication. If the RADIUS server supports return attributes, and sets an
attribute value to the reply message, W-IAP can analyze the return message and match attributes
with a user pre-defined VLAN derivation rule. If the rule is matched, the VLAN value defined by
the rule is assigned to the user.
Figure 110 - Configuring RADIUS Attributes on the RADIUS Server
Configuring VLAN Derivation Rules on aW-IAP
The rule assigns the user to a VLAN based on the attributes returned by the RADIUS server when
the user is authenticated and the MAC address of the user.