dynamic-vlan-assignment
Enables dynamic VLAN assignment on
this WLAN, and adds or removes VLANs for the selected WLAN. Configure this feature to allow
an override to the WLAN configuration. If, as part of the authentication process, the
RADIUS server returns a client's VLAN-ID in a RADIUS Access-Accept packet, and this feature
is enabled, all client traffic is forward on that VLAN. If disabled, the RADIUS server
returns VLAN-ID is ignored and the WLAN‘s VLAN configuration is used. For more information,
see vlan. This option is disabled by default.
Supported on the following devices:
- Access Points:
AP3000/X, AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP7602, AP7612, AP7622, AP7632,
AP7662, AP8163, AP8533.
- Service Platforms:
NX5500, NX7500, NX9500, NX9600
- Virtual Platforms: CX9000, VX9000
Syntax
dynamic-vlan-assignment allowed-vlan <VLAN-ID>
Parameters
dynamic-vlan-assignment allowed-vlan <VLAN-ID>
| dynamic-vlan-assignment allowed-vlan |
Enables dynamic VLAN assignment and configures a list of VLAN IDs or
VLAN alias allowed access to the WLAN |
| <VLAN-ID> |
Specify the list of VLAN IDs or the VLAN alias
names. For example, 10-20, 25, 30-35, $guest. For
example, 10-20, 25, 30-35, $guest. For information on
VLAN aliases, see alias .
|
Examples
ap505-13403B(config-wlan-test)#dynamic-vlan-assignment allowed-vlans 2,3,4
ap505-13403B(config-wlan-test)#show context
wlan test
ssid test
vlan 1
bridging-mode local
encryption-type ccmp
authentication-type sae-psk
dynamic-vlan-assignment allowed-vlans 2-4
protected-mgmt-frames optional
controller-assisted-mobility
dpi metadata http
ap505-13403B(config-wlan-test)#
