[e-nsp] MAC-based VLAN Authentification on BlackDiamond 8806

Kerry Milestone km4 at sanger.ac.uk
Thu Mar 8 10:19:36 EST 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

You may wish to look at packetfence (www.packetfence.org) which has support
for XOS.  Also, ReachNXT's are great for meeting rooms.


Alternatively, it is very possible to keep static mac address users on the
switch itself.

Chapter 21 of the Concepts Guide should give you everything.  Basically,
something like this {your mileage may vary...}:


- -o- Create known good users

configure netlogin local-user <MAC Address> password vlan-vsa untagged
"ClientData"


- -o- Configure your local vlans, and a loopback vlan for networklogin

create vlan VisitingGuests
create vlan ClientData
configure netlogin vlan VisitingGuests

- -o- Remove the ports you want from normal vlans
configure ClientData delete port 1:*

- -o- Enable netlogin using mac based auth, default password for localusers

enable netlogin mac
enable netlogin ports <port list> mac
configure netlogin ports <port list> mode mac-based-vlans

configure netlogin add mac-list default password








Regards,
Kerry.




On 08/03/12 13:13, Huettner, Christof wrote:
> Hi,
> 
> 
> 
> i want to implementate that in our meeting room (8 Ports there) my team 
> (ca. 15 MAC`s addresses) get with mac-based vlan authentification the 
> ClientData VLAN for there Notebooks, and guests (all other MAC`s) should 
> get connected to the GuestVLAN.
> 
> 
> 
> Is this possible to implementate?
> 
> 
> 
> I read something about netlogin with mac-based vlans, but dont know how i 
> really configure these options..
> 
> 
> 
> The VLANs are still created, and in all other rooms there is port-based 
> vlan, can i add only for the ports in my meeting room these opinion?
> 
> 
> 
> Thanks
> 
> 
> 
> *Christof Hüttner  |  Netzwerkspezialist  (Network Specialist)*
> 
> Fachinformatiker - Systemintegration
> 
> ACSS - Avaya Certified Support Specialist for Ethernet Routing Switch 
> Implementation * *MEGATECHcommunication GmbH Gewerbepark Leutzing 5+7  | 
> 94508 Schöllnach  |  Germany tel+49 (9903) 9324-220  |  fax +49 (9903) 
> 9324-200 christof.huettner at megatech-communication.de 
> <file:///\\desln-pdc-1\HOME\MDR\documents\marion.drozdek@megatech-communication.de>
>
>
> 
www.megatech-communication.de <http://www.megatech-communication.de>
> 
> **
> 
> ----------------------------------------------------------------------------------------------------------------------------------
>
>
> 
Sitz der Gesellschaft: Schöllnach
> Handelsregister: Amtsgericht Deggendorf, HRB 2315 Geschäftsführung: 
> Rigobert Kühn
> 
> *Wichtiger Hinweis:* Diese E-Mail enthält vertrauliche und/oder rechtlich 
> geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder 
> diese E-Mail irrtümlich erhalten haben sollten, weisen wir Sie darauf hin,
>  dass das unerlaubte Kopieren sowie die unbefugte Weiterleitung dieser 
> E-Mail nicht gestattet ist. Bitte informieren Sie sofort den Absender und 
> löschen Sie diese E-Mail. Vielen Dank.
> 
> *Important Notice:*This e-mail may contain trade secrets or privileged, 
> undisclosed or otherwise confidential information. If you have received 
> this e-mail in error, you are hereby notified that any review, copying or 
> distribution of it is strictly prohibited. Please inform us immediately
> and destroy the original transmittal. Thank you for your cooperation.
> 
> 
> 
> 
> 
> _______________________________________________ extreme-nsp mailing list 
> extreme-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/extreme-nsp

- -- 
- --------------------------------------
.- Kerry Milestone                  -.
.- Principle Network Administrator  -.
.- Wellcome Trust Sanger Institute  -.
.-                                  -.
.- http://www.sanger.ac.uk          -.
- --------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk9YzgcACgkQ840aYY1lKXmrVACeODAdVZjE7/ziub/XOOjQStIu
+GsAoIO31PCi6cD7lA8FUyMZZHQCbZUa
=x2sL
-----END PGP SIGNATURE-----


-- 
 The Wellcome Trust Sanger Institute is operated by Genome Research 
 Limited, a charity registered in England with number 1021457 and a 
 company registered in England with number 2742969, whose registered 
 office is 215 Euston Road, London, NW1 2BE. 


More information about the extreme-nsp mailing list