Netlogin mac-based VLANs with Local Database and Wildcard?

[EtherNation_Use]

Create Date: Jun 11 2012 7:40AM

Hi,

i have a conferencing room with 8 ports there on a BlackDiamond 8806. I want only this 8 ports to add netlogin mac-based vlan because my collegs MAC address (13 notebooks) should get the intern vlan to access all servers and files. And all other MAC's (Guests) should get access to my Guest VLAN. So is there a wildcard for the local database to add all unknown MAC addresses to my configured Guest VLAN named "GaesteNetwork".

Ive tried to use my GuestVLAN as Netlogin VLAN but this doesnt work and i dont found a wildcard for "all other MAC addresses"

Greetz Chris and thanks for help.

(from Chris_Huettner)

[EtherNation_Use]

Create Date: Jun 11 2012 2:45PM

Guest VLAN feature only works with 802.1X enabled ports. Without a radius server, the only way this will work is with the service-unavailable feature. Here's my config:





#

# Module netLogin configuration.

#

configure netlogin vlan temp

enable netlogin mac

configure netlogin mac authentication database-order local radius

enable netlogin ports 2 mac

configure netlogin ports 2 mode port-based-vlans

configure netlogin ports 2 no-restart

configure netlogin ports 2 allow egress-traffic all_cast

configure netlogin add mac-list ff:ff:ff:ff:ff:ff 48

enable netlogin authentication service-unavailable vlan ports 2

configure netlogin authentication service-unavailable vlan GUEST ports 2





(from john_padilla)