Filter
Top Products
Configuring Authenticated VLANs AVLAN Configuration Overview
OmniSwitch 6600 Family Network Configuration Guide April 2006 page 21-5
Sample AVLAN Configuration
1 Enable at least one authenticated VLAN:
-> vlan 2 authentication enable
Note that this command does not create a VLAN; the VLAN must already be created. For information
about creating VLANs, see Chapter 4, “Configuring VLANs.”
The VLAN must also have a router port if Telnet or Web browser clients will be authenticating into this
VLAN. The following command configures a router port on VLAN 2:
-> vlan 2 router ip 10.10.2.20
2 Create and enable at least one mobile authenticated port. The port must be in VLAN 1, the default
VLAN on the switch.
-> vlan port mobile 3/1
-> vlan port 3/1 authenticate enable
3 Set up a DNS path if users will be authenticating through a Web browser:
-> aaa avlan dns auth.company
4 Set up a path to a DHCP server if users will be getting IP addresses from DHCP. The IP helper address
is the IP address of the DHCP server; the AVLAN default DHCP address is the address of any router port
configured on the VLAN.
-> ip helper address 10.10.2.5
-> aaa avlan default dhcp 10.10.2.20
If the relay will be used for authentication only, enter the ip helper avlan only command:
-> ip helper avlan only
Note. To check the DNS and DHCP authentication configuration, enter the show aaa avlan config
command. For example:
-> show aaa avlan config
default DHCP relay address = 192.9.33.222
authentication DNS name = authent.company.com
For more information about this command, see the OmniSwitch CLI Reference Guide.
5 Configure the switch to communicate with the authentication servers. Use the aaa radius-server or
aaa ldap-server command. For example:
-> aaa radius-server rad1 host 10.10.1.2 key wwwtoe timeout 3
-> aaa ldap server ldap2 host 199.1.1.1 dn manager password foo base c=us
See Chapter 20, “Managing Authentication Servers,” for more information about setting up external serv-
ers for authentication.