Seitenhistorie

Description:

Some scenarios require certain end devices to always enter a specific VLAN, regardless of which switch port the devices are connected to. This can be achieved through RADIUS authentication, where the RADIUS user is assigned to a specific VLAN (dynamic VLAN). 

This article describes how to set up dynamic VLAN on a switch of the XS-51xx / XS-6xxx and GS-45xx series.

Requirements:

• LANCOM router as the RADIUS server
• Switch of the XS-51xx / XS-61xx or GS-45xx series with LCOS SX from version 5.20 Rel (download current latest version) 
• LCOS as of version 10.30 on the router that acts as a RADIUS server (download current latest version) 
• LANtools from version 10.30 (download latest version)
• Any web browser for accessing the switch web interface

Procedure:

1) Configuring the RADIUS server on the LANCOM router:

...

• IP address: Enter the IP address of the switch so that this it can authenticate itself as the the RADIUS authenticator at the RADIUS server.
• Netmask: Enter the netmask 255.155.255.255. This stands for a single IP address.
• Protocols: Check that the protocol is set to RADIUS.
• Client secret: Enter a password that the switch uses to authenticate itself at the RADIUS server. This is entered on the switch in step 2.6.

...

• Name / MAC address: Enter the user name (in this example user).
• Password: Enter the password for the user. 
• VLAN: Enter the VLAN to be assigned to the user (in this example the VLAN 5).
• Service type: From the drop-down menu, select Call check.
• Expiry type: From the drop-down menu, select Never so that the user account remains permanently valid.

...