Comware Based
1748253 Members
3991 Online
108760 Solutions
New Discussion

Problem about dinamically assigned VLAN by a radius on a-series

 
Nazzareno Taborgna
Occasional Contributor

Problem about dinamically assigned VLAN by a radius on a-series

Hello,

I have several a-series switches with mac-authentication and  VLAN assigned by the radius server.

These switches are working fine, but I would like to restrict the access only to some VLANs, even in case of successfully authentication. Example:

In my configuration there are the vlan: ( 1, 2, 8, 9, 11, 32, 33, 34, 35, 36, 37, 45, 90, 112, 116 and 201 ).

I am also configuring unnecessary VLANs to get an easier life with the stp.

From this switch I expect access only from VLAN 8 and 11, but an user by moving its equipment from another area, could make a successfully authentication on VLAN 9. I want prevent the access to the VLAN 9 from this switch. Is there any way to do this?