Allied Telesis AT-9000 Series - Manual (Page 923)

AT-9000 Switch Command Line User’s Guide
895
AUTH DYNAMIC-VLAN-CREATION
Syntax
auth dynamic-vlan-creation single| multi
Parameters
single
Specifies that an authenticator port forwards packets of only those
supplicants that have the same VID as the supplicant who initially
logged on.
multi
Specifies that an authenticator port forwards packets of all
supplicants, regardless of the VIDs in their client accounts on the
RADIUS server.
Mode
Port Interface mode
Description
Use this command to activate dynamic VLAN assignments of
authenticator ports. By default, dynamic VLAN creation is disabled. For
background information, refer to “Supplicant and VLAN Associations” on
page 873.
Confirmation Command
“SHOW AUTH-MAC INTERFACE” on page 923 or “SHOW DOT1X
INTERFACE” on page 928
Examples
This example activates dynamic VLAN assignment on authenticator port
18. When the initial client logs on, the switch moves the port to the VLAN
specified in the client’s account on the RADIUS server. At the Single
setting, the port forwards only packets of supplicants whose authentication
server accounts specify the same VLAN:
awplus> enable
awplus# configure terminal
awplus(config)# dot1x port-control auto
awplus(config)# interface port1.0.18
awplus(config-if)# auth dynamic-vlan-creation single