topic RE: NAC Private VLAN / Protected Port in ExtremeCloud IQ- Site Engine Management Center

NAC Private VLAN / Protected Port

Ronny_Engelhard — Thu, 25 Jun 2015 17:24:00 GMT

Hi,

how is it possible to define a port as protected port via NAC (Maybe Radius Attributes)?
The aim is a private vlan implementation for some users.
Is it also possible for multiuser authentification at one edge port?

Ronny

RE: NAC Private VLAN / Protected Port

Ryan_Yacobucci — Thu, 31 Dec 2015 03:48:00 GMT

Hello Ronny,

It is not possible to set a protected port via NAC or RADIUS attributes. You can define a VLAN to be used, but the "protected port" feature that prevents protected ports from seeing other protected port traffic is not possible.

It is possible for multi-user authentication at one edge port. Different model switches have different user limitations so I would recommend that you check the release notes for the device you're looking into to determine specific user count limitations.

Thanks
-Ryan

RE: NAC Private VLAN / Protected Port

M_Nees — Tue, 12 Sep 2017 19:20:00 GMT

Defining "protected ports" aka "private vlans" is a nice feature request.

on my current project is was nice if this would be possible but it is not!

RE: NAC Private VLAN / Protected Port

M_Nees — Tue, 12 Sep 2017 21:21:00 GMT

on EXOS you can use "port isolation" - see at my other tread "Feature "Protected Port" needed - EXOS and S-Series"