Enterasys-B3 Switche for VLAN-Radius Attribute

  • 0
  • 1
  • Problem
  • Updated 2 years ago
  • Solved


if I’m not mistaken, the  Exnterasys B3  Switche for example are per Default set to accept only policy.

With the following command, one can set it to also accept the vlan-tunnel-Attribute.

Set policy maptable response both

I’m typing this command unsuccessfully on my B3-Switch.

My only goal is:

-       dynamically assign vlan-ID to hosts after authentication

Note that customer has no Policy License for B3, therefore no integration possible into the Policy Manager.  But should be integrated with RFC3580.

How can I make sure that the switch is set to accept vlan attribute?


How can I set the switch to accept vlan attribute given the fact that no Policy license is available?


Thanks in advance for your quick reply.


Kindest regards



Photo of Gradelain Ngouni

Gradelain Ngouni

  • 480 Points 250 badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Paul Poyant

Paul Poyant, Employee

  • 3,516 Points 3k badge 2x thumb
Official Response
On a B3 with firmware 6.03 and higher;
  • if policy is unlicensed (=the default), "tunnel mode" is emulated for RFC3580 support.
  • if policy is licensed, "policy mode" is used by default, but can be overridden by 'set policy maptable response tunnel | both'.
Have you tested functionality and determined that RFC3580 is not working?
Have you configured 'set vlanauthorization enable' and 'set vlanauthorization enable <port#>'?
See Hub KB 10283 , "Sample SecureStack Configuration for 802.1x, EAP, RFC3580, and MUA".