Skip to main content

3 Messages

 • 

110 Points

Wed, Jun 19, 2019 6:30 PM

Answered

ICX MAC based dynamic vlan assignment without radius

ICX7150 SPS08080d

I'm trying to assign some intercom devices to VLAN 15 based on a MAC range.


Looks like I'm supposed to enable 802.1x, then use an authentication and mac filter to assign the vlan-id for dynamic assignment. I'm just getting a little lost in the syntax.


Responses

3 Messages

 • 

110 Points

a year ago

I figured it out.


!
vlan 1 name DEFAULT-VLAN by port
 no untagged ethe 1/1/1 to 1/1/24
!
vlan 15 by port
 tagged ethe 1/2/1
!
vlan 254 by port
 untagged ethe 1/2/1
!
!
authentication
  auth-default-vlan 254
  mac-authentication enable
  mac-authentication enable ethe 1/1/1 to 1/1/24
!
!
ip address 10.254.110.11 255.255.0.0 dynamic
ip default-gateway 10.254.0.1 dynamic
!
mac filter 1 permit any any
mac filter 15 permit b4fb.0000.0000 ffff.0000.0000 any
!

!
interface ethernet 1/1/1
  auth-filter 15 15
  auth-filter 1
!
interface ethernet 1/1/2
  auth-filter 1
  auth-filter 15 15
!

Brand User

2.6K Messages

 • 

44.8K Points

Thanks Chris,

    Your info will be captured in our KBA-9467.

1 Message

 • 

60 Points

FYI, after int e 1/1/x I had to use "mac-auth auth-filter 1".