MAC End system Rule untagged and tagged Vlan

[dpanev]

Hello everyone,

I want to create a rule in which Untagged and Tagged Vlans are passed to an End system group. MAC authentication takes place. Apparently I'm blind because it can't be that difficult. If it is, it should be started here because this is unnecessarily complicated. As a rule, I can only select tagged or untagged and define a Vlan. That makes little sense.

Best Regards

[Ryan_Yacobucci]

Hello,

In Control --> Policy --> Roles/Services --> Select your Role --> Click the "VLAN Egress" tab --> Specific which VLAN and it's tagging style.

If you're doing multiple egresses on Fabric Engine you need to specific the FA-VLAN-ISID=0:<isid> for untagged egress and FA-VLAN-ISID=<VLANID>:<ISID> for tagged egress. 

Usage of the RADIUS attributes lists is necessary to send multiple FA-VLAN-ISID AVPs

Thanks
-Ryan

[dpanev]

Ok i know now how.....but i dont like it 😉

[Bartek]

For EXOS/Switch Engine: Have you tried sending VSA 211: Extreme-Netlogin-Extended-Vlan? According to user guide: "This attribute specifies one or more destination VLANs that the RADIUS server sends to the switch after successful authentication." Probably you can send this attribute as Custom variable specified in Policy Mappings. I never did it myself so I'm just curious