ICX MAC based dynamic vlan assignment without radius

  • 1
  • Question
  • Updated 4 weeks ago
  • Answered

ICX7150 SPS08080d

I'm trying to assign some intercom devices to VLAN 15 based on a MAC range.


Looks like I'm supposed to enable 802.1x, then use an authentication and mac filter to assign the vlan-id for dynamic assignment. I'm just getting a little lost in the syntax.


Photo of Chris Thomas

Chris Thomas

  • 3 Posts
  • 1 Reply Like

Posted 1 month ago

  • 1
Photo of Chris Thomas

Chris Thomas

  • 3 Posts
  • 1 Reply Like
I figured it out.


!
vlan 1 name DEFAULT-VLAN by port
 no untagged ethe 1/1/1 to 1/1/24
!
vlan 15 by port
 tagged ethe 1/2/1
!
vlan 254 by port
 untagged ethe 1/2/1
!
!
authentication
  auth-default-vlan 254
  mac-authentication enable
  mac-authentication enable ethe 1/1/1 to 1/1/24
!
!
ip address 10.254.110.11 255.255.0.0 dynamic
ip default-gateway 10.254.0.1 dynamic
!
mac filter 1 permit any any
mac filter 15 permit b4fb.0000.0000 ffff.0000.0000 any
!

!
interface ethernet 1/1/1
  auth-filter 15 15
  auth-filter 1
!
interface ethernet 1/1/2
  auth-filter 1
  auth-filter 15 15
!

Photo of Michael Brado

Michael Brado, Official Rep

  • 2874 Posts
  • 400 Reply Likes
Thanks Chris,

    Your info will be captured in our KBA-9467.