Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring the RADIUS NAS-Port-Type per VLAN

    As an alternative to globally configuring the NAS-Port-Type (61) RADIUS attribute in an access profile, you can configure the NAS-Port-Type on a per-VLAN basis as part of a NAS-Port options definition. The NAS-Port-Type specifies the type of physical port that the network access server (NAS) uses to authenticate the subscriber.

    Configuring NAS-Port options definitions on a per-VLAN basis is useful in network configurations that use a 1:1 access model.

    To configure the NAS-Port-Type RADIUS attribute per VLAN:

    1. Specify the interface you want to configure.
      [edit]user@host# edit interfaces interface-name
    2. Enable VLAN tagging on the interface.
      [edit interfaces interface-name]user@host# set vlan-tagging

      Setting VLAN tagging enables the reception and transmission of 802.1Q VLAN-tagged frames on the interface. You must enable VLAN tagging before you can configure the VLAN ranges to which the NAS-Port options definition applies.

    3. Specify that you want to configure RADIUS options for a VLAN interface.
      [edit interfaces interface-name]user@host# edit radius-options
    4. Create a named NAS-Port options definition.
      [edit interfaces interface-name radius-options]user@host# edit nas-port-options nas-port-options-name
    5. Configure the NAS-Port-Type.
      [edit interfaces interface-name radius-options nas-port-options nas-port-options-name]user@host# set nas-port-type port-type
    6. Configure the VLAN range or ranges to which the NAS-Port options definition applies.
      [edit interfaces interface-name radius-options nas-port-options nas-port-options-name]user@host# set vlan-ranges (any | low-tag–high-tag)

      Per-VLAN configurations typically require you to create a VLAN range that consists of a single VLAN ID on the physical interface. To do so, set the low-tag and high-tag options in the vlan-ranges statement to the same value, as shown in the following example.

    The following example shows a per-VLAN NAS-Port options definition named subscribers-west that configures the ethernet NAS-Port-Type for VLAN ID 3 on Gigabit Ethernet physical interface ge-1/1/0.

    [edit interfaces ge-1/1/0 radius-options]
    nas-port-options subscribers-west {nas-port-type ethernet;vlan-ranges {3-3;}}
     

    Related Documentation

     

    Published: 2013-02-11

    Previous Page Next Page