Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring the RADIUS NAS-Port-Type per Stacked VLAN

    As an alternative to globally configuring the NAS-Port-Type (61) RADIUS attribute in an access profile, you can configure the NAS-Port-Type on a per-stacked VLAN basis as part of a NAS-Port options definition. The NAS-Port-Type specifies the type of physical port that the network access server (NAS) uses to authenticate the subscriber.

    Configuring NAS-Port options definitions on a per-stacked VLAN basis is useful in network configurations that use an N:1 access model.

    To configure the NAS-Port-Type RADIUS attribute per stacked VLAN:

    1. Specify the interface you want to configure.
      [edit]user@host# edit interfaces interface-name
    2. Enable stacked VLAN tagging on the interface.
      [edit interfaces interface-name]user@host# set stacked-vlan-tagging

      Setting stacked VLAN tagging enables you to configure dual VLAN tags for all logical interfaces on the physical interface. You must enable stacked VLAN tagging before you can configure the stacked VLAN ranges to which the NAS-Port options definition applies.

    3. Specify that you want to configure RADIUS options for a stacked VLAN interface.
      [edit interfaces interface-name]user@host# edit radius-options
    4. Create a named NAS-Port options definition.
      [edit interfaces interface-name radius-options]user@host# edit nas-port-options nas-port-options-name
    5. Configure the NAS-Port-Type.
      [edit interfaces interface-name radius-options nas-port-options nas-port-options-name]user@host# set nas-port-type port-type
    6. Configure the stacked VLAN range or ranges to which the NAS-Port options definition applies.
      [edit interfaces interface-name radius-options nas-port-options nas-port-options-name]user@host# set stacked-vlan-ranges (any | low-outer-tag–high-outer-tag),any

      Per-stacked VLAN configurations require you to create a stacked VLAN range of subscribers to which the NAS-Port options definition applies. You must configure the low and high outer tags (VLAN IDs) in the range 1 through 4094, and the inner tag (S-VLAN ID) as any to represent all S-VLAN ID tags.

    7. Repeat Steps 3 through 6 to configure additional NAS-Port options definitions on this interface.

    The following example creates two NAS-Port options definitions, subscribers-north and subscribers-south, configured on a per-stacked VLAN basis on Gigabit Ethernet physical interface ge-1/1/0.

    The subscribers-north definition configures a NAS-Port-Type user-defined value (4711) for a stacked VLAN range with outer VLAN ID 1 and all inner S-VLAN IDs. The subscribers-south definition configures a NAS-Port-Type user-defined value (4722) for a stacked VLAN range with outer VLAN IDs in the range 2 through 10, and all inner S-VLAN IDs.

    [edit interfaces ge-2/0/1 radius-options]
    nas-port-options subscribers-north {nas-port-type 4711;stacked-vlan-ranges {1-1,any;}}nas-port-options subscribers-south {nas-port-type 4722;stacked-vlan-ranges {2-10,any;}}
     

    Related Documentation

     

    Published: 2013-02-11

    Previous Page Next Page