EGRESS-VLAN-ID

Functionality is combined with other RADIUS attributes and EAPoL configurations to create untagged S-UNIs.

This attribute supports the following combinations:

untagged EGRESS-VLAN-ID + VLAN:ISID -> VLAN from S-UNI becomes untagged
untagged EGRESS-VLAN-ID + vid[NEW_RADIUS_VID] + autoIsidOffset -> create S-UNI for I-SID (VLAN+autoIsidOffset)

Examples

From the RADIUS attributes, for untagged VLAN 15. The VLAN from S-UNI becomes untagged:

Egress-VLANID = "838860815" (untagged vlan 15) 
Fabric-Attach-ISID += "15:23513"

The following example results in the value 0:1015 for creating an untagged S-UNI.

From the RADIUS attributes, for untagged VLAN 15 and RADIUS-assigned VLAN. Creates S-UNI for I-SID (VLAN+autoIsidOffset):

Egress-VLANID = "838860815"
Tunnel-Private-Group-Id = "15"

From the EAP configuration:

eapol auto-isid-offset 1000 
eapol auto-isid-offset enable

Consider the following when using this attribute:

Any combinations with EGRESS-VLAN-ID for a tagged VLAN are ignored.
When EGRESS-VLAN-ID and VLAN:ISID binding attributes are used, the VLAN must have the same value.
The RADIUS server can provide more than one VLAN:ISID binding but one must match the VLAN used in EGRESS-VLAN-ID to create an untagged S-UNI.
Only one EGRESS-VLAN-ID attribute is used. If more than one is found in the packet, only the first one is used.
If the untagged S-UNI is derived from EGRESS-VLAN-ID + VLAN-ID + VLAN attribute + auto-isid-offset, the packet must not contain any S-UNI bindings.