Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Configuring VLAN Interfaces for the Layer 2 Wholesale Solution

Clients access the Layer 2 Wholesale network through a specific interface. After they access this interface, and when they are authenticated, VLANs are dynamically created to carry the client traffic.


To support Layer 2 access profiles the RADIUS server must provide VLAN authentication.

To configure a VLAN interface for dynamic client access:

  1. Access the physical interface that you want to use for dynamically creating VLAN interfaces.
  2. Specify the encapsulation type for the VLAN interfaces.
  3. Specify the desired VLAN tagging.

    This example uses flexible VLAN tagging to simultaneously support transmission of 802.1Q VLAN single-tag and dual-tag frames on logical interfaces on the same Ethernet port.

  4. Specify that you want to automatically configure VLAN interfaces.
  5. Specify that you want to configure stacked VLANs.
  6. Create the dynamic VLAN profile that you want the interface to use.
  7. Define the VLAN ranges for the dynamic profile.
  8. Move up two levels in the configuration hierarchy to define the VLAN authentication profile.
  9. Define a simple access profile that specifies the RADIUS server used to provide VLAN authentication. Use the top command to position yourself at the edit hierarchy.
  10. Repeat steps for any other interfaces that you want to use for creating VLANs.

The configuration of the VLAN Interface for the Layer 2 wholesale dynamic profile is displayed in curly brace format: