Multiple Fabric Attach VLAN-ISID Attributes

Version 33.2.1 adds support for processing multiple VLAN/NSI pairs in Radius VSA 171: Fabric-Attach-ISID. The processed VLAN/NSI information is propagated using LLDP Fabric Attach TLV if a Fabric Attach Server is present.

Supported Platforms

All platforms.

Example

Example configuration for Multiple Fabric Attach-VLAN-ISID:

configure policy rule-model access-list
configure policy slices tci-overwrite 2
configure policy slices shared 2

configure netlogin port 3:32 allowed-users 768

configure policy profile 1 name "test" pvid-status "enable" pvid 22 tci-overwrite "enable" nsi 121 
configure policy profile 2 name "sqa" pvid-status "enable" pvid 23 tci-overwrite "enable" nsi 1002 
configure policy profile 3 name "policy" access-list "policy" pvid-status "enable" pvid 44 tci-overwrite "enable"  
create policy access-list policy.ace matches tcpsourceportIP 34-50:1.1.1.1 mask 64 actions syslog forward cos 5 
configure policy maptable response both
configure policy vlanauthorization enable
enable policy
enable netlogin mac 
enable netlogin ports 3:32 mac 
configure netlogin add mac-list 00:00:01:00:00:00 24 encrypted "#$fSY+a7mwkRY7A2hb5qxTlNVojps+ig=="
configure netlogin add mac-list f0:64:26:70:00:00 32 encrypted "#$QJZceerJZ9paDNqjwwLXKOzOzg6Ryw=="
configure netlogin add mac-list ff:ff:ff:ff:ff:ff 48
Slot-1 Stack.17 # show ports 3:32 vlan
         Untagged
Port     /Tagged   VLAN Name(s)
-------- --------  ------------------------------------------------------------
3:32     Untagged  SYS_VLAN_3111, v4091
         Tagged    SYS_VLAN_0100, SYS_VLAN_0101, SYS_VLAN_0102, SYS_VLAN_0103,
                   SYS_VLAN_0104, SYS_VLAN_0105, SYS_VLAN_0106, SYS_VLAN_0107,
                   SYS_VLAN_0108, SYS_VLAN_0109, SYS_VLAN_0110, SYS_VLAN_0302,
                   SYS_VLAN_2000, SYS_VLAN_2001, SYS_VLAN_3200, SYS_VLAN_3999,
                   v300

(CIT_33.2.0.134) Slot-1 Stack.19 # show fabric attach assignments
Fabric Attach Mode: Proxy
ISID/NSI Offset   : None
Port     VLAN  VLAN Name                         Type     ISID/NSI  Status
-------  ----  --------------------------------  -------  --------  --------
          111  SYS_VLAN_0111                     Dynamic       111  Active
          112  SYS_VLAN_0112                     Dynamic       112  Active
          113  SYS_VLAN_0113                     Dynamic       113  Active
          114  SYS_VLAN_0114                     Dynamic       114  Active
          115  SYS_VLAN_0115                     Dynamic       115  Active
          116  SYS_VLAN_0116                     Dynamic       216  Active
          117  SYS_VLAN_0117                     Dynamic       117  Active
          300  v300                              Dynamic       301  Active
          302  SYS_VLAN_0302                     Dynamic     14444  Active
         2000  SYS_VLAN_2000                     Dynamic      2000  Active
         2001  SYS_VLAN_2001                     Dynamic      2001  Active
         3200  SYS_VLAN_3200                     Dynamic       300  Active
         3999  SYS_VLAN_3999                     Dynamic       300  Active
         4091  v4091                             Dynamic         1  Active