Network configuration
VLAN support
5-8
2. Under Egress VLAN, select an VLAN ID. To be included in the drop-down list, the VLAN
must be defined on the Network > Ports page and not be assigned to a VLAN range.
3. Select Save.
Configuring a default VLAN
You can configure port 1 (or port 2) with a default VLAN setting so that any outgoing traffic
that is not tagged with a VLAN ID receives the default VLAN ID.
You can restrict this default VLAN to carry management traffic only, which includes the
following:
All traffic that is exchanged with the controller (login authentication requests/replies)
All traffic that is exchanged with external RADIUS servers
HTTPS sessions established by managers and operators of the management tool
Incoming and outgoing SNMP traffic
DNS requests and replies.
To assign a default VLAN, see Port configuration on page 5-4.
Assigning VLANs to individual users
You can assign a VLAN to an individual user by setting the attributes Tunnel-Medium-Type,
Tunnel-Private-Group-ID, and Tunnel-Type in the user’s RADIUS account. Restrictions
are as follows:
A user cannot be assigned to a VLAN that is set as the default VLAN on port 1 or port 2.
A user can only be assigned to a VLAN that is defined on the Network >Ports page.
Only applicable to clients using WPA or 802.1X. (Not applicable to MAC authentication.)
Note A VLAN that is assigned to a user overrides a VLAN assigned by a VSC or by the default
VLAN.
For more information see Configuring user accounts on a RADIUS server on page 6-5.
To Next Page
Loading...
Need help?
General
