Mailing List Archive

MAC-based VLAN Authentification on BlackDiamond 8806
Hi,

i want to implementate that in our meeting room (8 Ports there) my team (ca. 15 MAC`s addresses) get with mac-based vlan authentification the ClientData VLAN for there Notebooks, and guests (all other MAC`s) should get connected to the GuestVLAN.

Is this possible to implementate?

I read something about netlogin with mac-based vlans, but dont know how i really configure these options..

The VLANs are still created, and in all other rooms there is port-based vlan, can i add only for the ports in my meeting room these opinion?

Thanks

Christof Hüttner | Netzwerkspezialist (Network Specialist)
Fachinformatiker - Systemintegration
ACSS - Avaya Certified Support Specialist for Ethernet Routing Switch Implementation

MEGATECH communication GmbH
Gewerbepark Leutzing 5+7 | 94508 Schöllnach | Germany
tel +49 (9903) 9324-220 | fax +49 (9903) 9324-200
christof.huettner@megatech-communication.de<file:///\\desln-pdc-1\HOME\MDR\documents\marion.drozdek@megatech-communication.de>
www.megatech-communication.de<http://www.megatech-communication.de>
[cid:image003.png@01CCFD35.A3958180]
----------------------------------------------------------------------------------------------------------------------------------
Sitz der Gesellschaft: Schöllnach
Handelsregister: Amtsgericht Deggendorf, HRB 2315
Geschäftsführung: Rigobert Kühn

Wichtiger Hinweis: Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen.
Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben sollten, weisen wir Sie darauf hin,
dass das unerlaubte Kopieren sowie die unbefugte Weiterleitung dieser E-Mail nicht gestattet ist.
Bitte informieren Sie sofort den Absender und löschen Sie diese E-Mail.
Vielen Dank.

Important Notice: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information.
If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited.
Please inform us immediately and destroy the original transmittal.
Thank you for your cooperation.
Re: MAC-based VLAN Authentification on BlackDiamond 8806 [ In reply to ]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

You may wish to look at packetfence (www.packetfence.org) which has support
for XOS. Also, ReachNXT's are great for meeting rooms.


Alternatively, it is very possible to keep static mac address users on the
switch itself.

Chapter 21 of the Concepts Guide should give you everything. Basically,
something like this {your mileage may vary...}:


- -o- Create known good users

configure netlogin local-user <MAC Address> password vlan-vsa untagged
"ClientData"


- -o- Configure your local vlans, and a loopback vlan for networklogin

create vlan VisitingGuests
create vlan ClientData
configure netlogin vlan VisitingGuests

- -o- Remove the ports you want from normal vlans
configure ClientData delete port 1:*

- -o- Enable netlogin using mac based auth, default password for localusers

enable netlogin mac
enable netlogin ports <port list> mac
configure netlogin ports <port list> mode mac-based-vlans

configure netlogin add mac-list default password








Regards,
Kerry.




On 08/03/12 13:13, Huettner, Christof wrote:
> Hi,
>
>
>
> i want to implementate that in our meeting room (8 Ports there) my team
> (ca. 15 MAC`s addresses) get with mac-based vlan authentification the
> ClientData VLAN for there Notebooks, and guests (all other MAC`s) should
> get connected to the GuestVLAN.
>
>
>
> Is this possible to implementate?
>
>
>
> I read something about netlogin with mac-based vlans, but dont know how i
> really configure these options..
>
>
>
> The VLANs are still created, and in all other rooms there is port-based
> vlan, can i add only for the ports in my meeting room these opinion?
>
>
>
> Thanks
>
>
>
> *Christof Hüttner | Netzwerkspezialist (Network Specialist)*
>
> Fachinformatiker - Systemintegration
>
> ACSS - Avaya Certified Support Specialist for Ethernet Routing Switch
> Implementation * *MEGATECHcommunication GmbH Gewerbepark Leutzing 5+7 |
> 94508 Schöllnach | Germany tel+49 (9903) 9324-220 | fax +49 (9903)
> 9324-200 christof.huettner@megatech-communication.de
> <file:///\\desln-pdc-1\HOME\MDR\documents\marion.drozdek@megatech-communication.de>
>
>
>
www.megatech-communication.de <http://www.megatech-communication.de>
>
> **
>
> ----------------------------------------------------------------------------------------------------------------------------------
>
>
>
Sitz der Gesellschaft: Schöllnach
> Handelsregister: Amtsgericht Deggendorf, HRB 2315 Geschäftsführung:
> Rigobert Kühn
>
> *Wichtiger Hinweis:* Diese E-Mail enthält vertrauliche und/oder rechtlich
> geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder
> diese E-Mail irrtümlich erhalten haben sollten, weisen wir Sie darauf hin,
> dass das unerlaubte Kopieren sowie die unbefugte Weiterleitung dieser
> E-Mail nicht gestattet ist. Bitte informieren Sie sofort den Absender und
> löschen Sie diese E-Mail. Vielen Dank.
>
> *Important Notice:*This e-mail may contain trade secrets or privileged,
> undisclosed or otherwise confidential information. If you have received
> this e-mail in error, you are hereby notified that any review, copying or
> distribution of it is strictly prohibited. Please inform us immediately
> and destroy the original transmittal. Thank you for your cooperation.
>
>
>
>
>
> _______________________________________________ extreme-nsp mailing list
> extreme-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/extreme-nsp

- --
- --------------------------------------
.- Kerry Milestone -.
.- Principle Network Administrator -.
.- Wellcome Trust Sanger Institute -.
.- -.
.- http://www.sanger.ac.uk -.
- --------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk9YzgcACgkQ840aYY1lKXmrVACeODAdVZjE7/ziub/XOOjQStIu
+GsAoIO31PCi6cD7lA8FUyMZZHQCbZUa
=x2sL
-----END PGP SIGNATURE-----


--
The Wellcome Trust Sanger Institute is operated by Genome Research
Limited, a charity registered in England with number 1021457 and a
company registered in England with number 2742969, whose registered
office is 215 Euston Road, London, NW1 2BE.
_______________________________________________
extreme-nsp mailing list
extreme-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/extreme-nsp