VLAN Name-Based Configuration in RADIUS and TACACS

Version 33.4.1 adds the ability to specify a VLAN name or interface name—rather than a static management IP address—when configuring RADIUS and TACACS. This enhancement simplifies configuration management and reduces the need for manual updates when IP addresses change. In cases where a VLAN has multiple IP addresses, the primary IP address will be used.

If the VLAN is not yet created, the configuration is accepted but marked as "Not In Service" until the VLAN and its IP are available.
If a VLAN has multiple IPs:
- For IPv4: the primary address is used.
- For IPv6: the lowest address is used.
Dynamic VLAN creation (for example, using ZTP+ or MVRP) is supported.

Supported Platforms

All platforms.

Modified CLI Commands

The configure radius, configure radius-accounting, configure radius dynamic-authorization, configure tacas, and configure tacas-accounting commands are modified to add the following syntax:

| client-vlan [vlan_name | future_vlan_name] {ipv4 | ipv6}]