RADIUS/Policy/NetLogin

RADIUS/Policy/NetLogin mappings are not persistent.

Actions when RADIUS is enabled::
  • Policy maptable may be configured to use policy, tunnel, or both.
  • RADIUS may return a policy name, a VLAN, and possibly an Network Service Identifier (NSI) mapping.
    If RADIUS returns a VLAN/NSI mapping:
    • Policy is not enabled: policy does not install an NSI mapping.
    • Policy is enabled: the mapping is installed if the following conditions are met.
      • Policy must be configured to make use of the RADIUS (RFC3580) VLAN, meaning:
        • The Policy maptable response must be set to “tunnel” or “both”.
        • If the response is set to “policy” (the default), the VLAN/NSI is not used.
        • Vlanauthorization must be enabled.
      • The VLAN and NSI must both be specified for the NSI to be used (see Defining VLAN/NSI Mappings with RADIUS Standards Attributes or VSAs).
      • The authentication response is an initial authentication for the given user or a re-authentication of an existing user with a mapping that differs from the existing mapping.