Version 33.2.1 adds support for processing multiple VLAN/NSI pairs in Radius VSA 171: Fabric-Attach-ISID. The processed VLAN/NSI information is propagated using LLDP Fabric Attach TLV if a Fabric Attach Server is present.
All platforms.
Example configuration for Multiple Fabric Attach-VLAN-ISID:
configure policy rule-model access-list configure policy slices tci-overwrite 2 configure policy slices shared 2 configure netlogin port 3:32 allowed-users 768 configure policy profile 1 name "test" pvid-status "enable" pvid 22 tci-overwrite "enable" nsi 121 configure policy profile 2 name "sqa" pvid-status "enable" pvid 23 tci-overwrite "enable" nsi 1002 configure policy profile 3 name "policy" access-list "policy" pvid-status "enable" pvid 44 tci-overwrite "enable" create policy access-list policy.ace matches tcpsourceportIP 34-50:1.1.1.1 mask 64 actions syslog forward cos 5 configure policy maptable response both configure policy vlanauthorization enable enable policy enable netlogin mac enable netlogin ports 3:32 mac configure netlogin add mac-list 00:00:01:00:00:00 24 encrypted "#$fSY+a7mwkRY7A2hb5qxTlNVojps+ig==" configure netlogin add mac-list f0:64:26:70:00:00 32 encrypted "#$QJZceerJZ9paDNqjwwLXKOzOzg6Ryw==" configure netlogin add mac-list ff:ff:ff:ff:ff:ff 48
Slot-1 Stack.17 # show ports 3:32 vlan Untagged Port /Tagged VLAN Name(s) -------- -------- ------------------------------------------------------------ 3:32 Untagged SYS_VLAN_3111, v4091 Tagged SYS_VLAN_0100, SYS_VLAN_0101, SYS_VLAN_0102, SYS_VLAN_0103, SYS_VLAN_0104, SYS_VLAN_0105, SYS_VLAN_0106, SYS_VLAN_0107, SYS_VLAN_0108, SYS_VLAN_0109, SYS_VLAN_0110, SYS_VLAN_0302, SYS_VLAN_2000, SYS_VLAN_2001, SYS_VLAN_3200, SYS_VLAN_3999, v300 (CIT_33.2.0.134) Slot-1 Stack.19 # show fabric attach assignments Fabric Attach Mode: Proxy ISID/NSI Offset : None Port VLAN VLAN Name Type ISID/NSI Status ------- ---- -------------------------------- ------- -------- -------- 111 SYS_VLAN_0111 Dynamic 111 Active 112 SYS_VLAN_0112 Dynamic 112 Active 113 SYS_VLAN_0113 Dynamic 113 Active 114 SYS_VLAN_0114 Dynamic 114 Active 115 SYS_VLAN_0115 Dynamic 115 Active 116 SYS_VLAN_0116 Dynamic 216 Active 117 SYS_VLAN_0117 Dynamic 117 Active 300 v300 Dynamic 301 Active 302 SYS_VLAN_0302 Dynamic 14444 Active 2000 SYS_VLAN_2000 Dynamic 2000 Active 2001 SYS_VLAN_2001 Dynamic 2001 Active 3200 SYS_VLAN_3200 Dynamic 300 Active 3999 SYS_VLAN_3999 Dynamic 300 Active 4091 v4091 Dynamic 1 Active