H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-18
The switch supports the integer mode and string mode of dynamic VLAN assignments
to adapt to authentication server. Different servers assign VLANs in different ways. You
are recommended to configure the switch based on the mode of dynamic VLAN
assignment used by the server.
Table 1-8 lists some common VLAN assignment modes
for RADIUS server.
Table 1-8 Common VLAN assignment modes for RADIUS server
Server type Dynamic VLAN assignment mode
CAMS
Integer (For the latest version, whether the mode is
integer or string depends on attribute value.)
ACS String
FreeRADIUS
Determined by attribute value (A value of 100
represents the integer mode and a value of "100"
represents the string mode).
Shiva Access Manager String
Steel-Belted Radius
Administrator
String
In actual applications, to use this feature together with Guest VLAN, set port control to
port-based mode.
Table 1-9 Configure dynamic VLAN assignment
To do... Use the command... Remarks
Enter system view
system-view
—
Create an ISP domain
and enter its view
domain isp-name
—
Set the VLAN assignment
mode
vlan-assignment-mode
{ integer | string }
Optional
By default, the VLAN
assignment mode is
integer.
Create a VLAN and enter
its view
vlan vlan-id
—
Set a VLAN name for
VLAN assignment
name string
This operation is required
if the VLAN assignment
mode is set to string.