dynamic-vlan-assignment

Enables dynamic VLAN assignment on this WLAN, and adds or removes VLANs for the selected WLAN. Configure this feature to allow an override to the WLAN configuration. If, as part of the authentication process, the RADIUS server returns a client's VLAN-ID in a RADIUS Access-Accept packet, and this feature is enabled, all client traffic is forward on that VLAN. If disabled, the RADIUS server returns VLAN-ID is ignored and the WLAN‘s VLAN configuration is used. For more information, see vlan. This option is disabled by default.

Supported on the following devices:

Access Points: AP3000/X, AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP7602, AP7612, AP7622, AP7632, AP7662, AP8163, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

dynamic-vlan-assignment allowed-vlan <VLAN-ID>

Parameters

dynamic-vlan-assignment allowed-vlan <VLAN-ID>


dynamic-vlan-assignment allowed-vlan	Enables dynamic VLAN assignment and configures a list of VLAN IDs or VLAN alias allowed access to the WLAN
<VLAN-ID>	Specify the list of VLAN IDs or the VLAN alias names. For example, 10-20, 25, 30-35, $guest. For example, 10-20, 25, 30-35, $guest. For information on VLAN aliases, see alias .

Examples

ap505-13403B(config-wlan-test)#dynamic-vlan-assignment allowed-vlans 2,3,4

ap505-13403B(config-wlan-test)#show context
wlan test
 ssid test
 vlan 1
 bridging-mode local
 encryption-type ccmp
 authentication-type sae-psk
 dynamic-vlan-assignment allowed-vlans 2-4
 protected-mgmt-frames optional
 controller-assisted-mobility
 dpi metadata http
ap505-13403B(config-wlan-test)#

Related Commands


no (wlan-config-mode)	Disables dynamic VLAN assignment on this WLAN