topic Re: MAC End system Rule untagged and tagged Vlan in ExtremeControl

MAC End system Rule untagged and tagged Vlan

dpanev — Thu, 23 Jan 2025 12:03:45 GMT

Hello everyone,

I want to create a rule in which Untagged and Tagged Vlans are passed to an End system group. MAC authentication takes place. Apparently I'm blind because it can't be that difficult. If it is, it should be started here because this is unnecessarily complicated. As a rule, I can only select tagged or untagged and define a Vlan. That makes little sense.

Best Regards

Re: MAC End system Rule untagged and tagged Vlan

dpanev — Thu, 23 Jan 2025 12:36:20 GMT

Ok i know now how.....but i dont like it 😉

Re: MAC End system Rule untagged and tagged Vlan

Ryan_Yacobucci — Thu, 23 Jan 2025 15:40:00 GMT

Hello,

In Control --> Policy --> Roles/Services --> Select your Role --> Click the "VLAN Egress" tab --> Specific which VLAN and it's tagging style.

If you're doing multiple egresses on Fabric Engine you need to specific the FA-VLAN-ISID=0:<isid> for untagged egress and FA-VLAN-ISID=<VLANID>:<ISID> for tagged egress.

Usage of the RADIUS attributes lists is necessary to send multiple FA-VLAN-ISID AVPs

Thanks
-Ryan

Re: MAC End system Rule untagged and tagged Vlan

Bartek — Mon, 27 Jan 2025 10:57:23 GMT

For EXOS/Switch Engine: Have you tried sending VSA 211: Extreme-Netlogin-Extended-Vlan? According to user guide: "This attribute specifies one or more destination VLANs that the RADIUS server sends to the switch after successful authentication." Probably you can send this attribute as Custom variable specified in Policy Mappings. I never did it myself so I'm just curious