Allied Telesis AT-8100 Series - Manual (Page 1077)

AT-8100 Switch Command Line User’s Guide
1077
 You cannot change the untagged VLAN assignment of a port after
it has been designated as an authenticator port. To change the
untagged VLAN assignment of an authenticator port, you must first
remove the authenticator designation. You can reapply the
authenticator role to the port after moving it to its new VLAN
assignment. Dynamic VLANs are supported only if the native
VLAN is the default (that is, 1).
 To use the Guest VLAN feature, you have to manually create the
VLAN. The switch does not create it automatically.
 The switch supports EAP-MD5, EAP-TLS, EAP-TTLS, and EAP-
PEAP authentication methods.
 The switch must have a management IP address to communicate
with the RADIUS server. For background information, refer to
Chapter 13, “IPv4 and IPv6 Management Addresses” on page 299.
Here are the guidelines to adding VLAN assignments to supplicant
accounts on a RADIUS server:
 The VLAN must be an 802.1q VLAN.
 The VLAN must already exist on the switch.
 A supplicant can have only one VLAN associated with it on the
RADIUS server.
 When a supplicant logs on, the switch port is moved to an
untagged/tagged VLAN as per the authenticator server’s response.