Concept Guide

210 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide
Figure 47 Configure VSA on a RADIUS Server
VLAN Assignment Based on Derivation Rules
When an external RADIUS server is used for authentication, the RADIUS server may return a reply message for
authentication. If the RADIUS server supports return attributes, and sets an attribute value to the reply
message, the W-IAP can analyze the return message and match attributes with a user pre-defined VLAN
derivation rule. If the rule is matched, the VLAN value defined by the rule is assigned to the user. For a
complete list of RADIUS server attributes, see RADIUS Server Authentication with VSA on page 160.
Figure 48 Configuring RADIUS Attributes on the RADIUS Server