Extreme-Dynamic-Config

This attribute configures port and VLAN based attributes.

• Name: Extreme-Dyn-Config​

• Value: 252​

• Type: String​

• Vendor: Extreme​

• Extreme Vendor ID is 1916​

The following features can be configured using Extreme-Dynamic-Config RADIUS VSA.

• VLAN Based Features:

  • DHCP Snooping

  • Dynamic ARP Inspection (DAI)

  • IGMP Snooping

• Port Based Features:

  • Custom Auto-Negotiation Advertisements

  • Bridge Protocol Data Unit (BPDU) Guard

  • IP Source Guard (IPSG)

  • Reauthentication

  • Simple Loop Prevention Protocol (SLPP) Guard

  • Traffic Control (Wake on LAN - WoL)

AN-ADVERTISMENTS:100Half or AN-ADVERTISMENTS:100H

AN-ADVERTISMENTS:100Half or AN-ADVERTISMENTS:100H settings configure Custom Auto-Negotiation Advertisements (CANA) speed and duplex to the following supported values:

• 10Half

• 100Full

• 100Half

• 100Full

• 1000Full

BPDU

This setting enables Bridge Protocol Data Unit (BPDU) Guard on the port where the client resides.

DAI

This setting enables Dynamic ARP Inspection (DAI) on the VLAN received from the RADIUS server. For a Flex-UNI port, DAI enables on the platform VLAN associated with the I-SID received from the RADIUS server.

DAI also enables on the default VLAN of the port to prepare for IP Source Guard (IPSG), which requires DAI and DHCP Snooping enabled on all VLANs. If the RADIUS server does not return a VLAN of I-SID, DAI enables on the default VLAN. For Flex-UNI ports, DAI enables on the platform VLAN associated with the untagged I-SID.

DHCPSNOOP

This setting enables DHCP Snooping on the VLAN received from the RADIUS server. For a Flex-UNI port, DHCP Snooping enables on the platform VLAN associated with the I-SID received from the RADIUS server.

DHCP Snooping also enables on the default VLAN of that port to prepare for IP Source Guard (IPSG), which requires DAI and DHCP Snooping enabled on all VLANs. If the RADIUS server does not return a VLAN of I-SID, DHCP Snooping enables on the default VLAN. For Flex-UNI ports, DHCP Snooping enables for the platform VLAN associated with the untagged I-SID.

IGMPSNOOP

This setting enables IGMP Snooping on the VLAN received from the RADIUS server. For a Flex-UNI port, IGMP Snooping enables on the platform VLAN associated with the I-SID received from the RADIUS server.

IPSG

This setting enables IP Source Guard (IPSG) on the port where the client resides.

In order to apply IPSG, DHCP Snooping and DAI must be configured on the RADIUS server. DHCP Snooping and DAI must be enabled on all VLANs.

The following is an example of a log message that displays if a setting is not configured correctly:

REAUTH or REAUTH:100

This setting enables EAPOL reauthentication on a port either manually using CLI or dynamically through RADIUS. The origin identifies how reauthentication was configured either CONFIG or RADIUS.

SLPPGUARD

This setting enables Simple Loop Prevention Protocol (SLPP) Guard on the port where the client resides.

WOL

This setting enables EAP traffic-control (Wake On LAN) on the port where the client resides.

Session Timeout and Reauthentication VSA behavior