Enables dynamic VLAN assignment on this WLAN, and adds or removes VLANs for the selected WLAN. Configure this feature to allow an override to the WLAN configuration. If, as part of the authentication process, the RADIUS server returns a client's VLAN-ID in a RADIUS Access-Accept packet, and this feature is enabled, all client traffic is forward on that VLAN. If disabled, the RADIUS server returns VLAN-ID is ignored and the WLAN‘s VLAN configuration is used. For more information, see vlan. This option is disabled by default.

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000


dynamic-vlan-assignment allowed-vlan <VLAN-ID>


dynamic-vlan-assignment allowed-vlan <VLAN-ID>
dynamic-vlan-assignment allowed-vlan Enables dynamic VLAN assignment and configures a list of VLAN IDs or VLAN alias allowed access to the WLAN
<VLAN-ID> Specify the list of VLAN IDs or the VLAN alias names. For example, 10-20, 25, 30-35, $guest. For example, 10-20, 25, 30-35, $guest.

For information on VLAN aliases, see alias .


ap505-13403B(config-wlan-test)#dynamic-vlan-assignment allowed-vlans 2,3,4
ap505-13403B(config-wlan-test)#show context
wlan test
 ssid test
 vlan 1
 bridging-mode local
 encryption-type ccmp
 authentication-type sae-psk
 dynamic-vlan-assignment allowed-vlans 2-4
 protected-mgmt-frames optional
 dpi metadata http

Related Commands

no (wlan-config-mode) Disables dynamic VLAN assignment on this WLAN