802.1X | 119Dynamic VLAN Assignment with Port AuthenticationDynamic VLAN Assignment with Port Authentication is supported on platforms: c s etFTOS supports dynamic VLAN assignment when using 802.1X. During 802.1x authentication, theexisting VLAN configuration of a port assigned to a non-default VLAN is overwritten and the port isassigned to a specified VLAN.• If 802.1x authentication is disabled on the port, the port is re-assigned to the previously-configuredVLAN.• If 802.1x authentication fails and if the authentication-fail VLAN is enabled for the port (seeConfiguring an Authentication-Fail VLAN on page 122), the port is assigned to the authentication-failVLAN.The dynamic VLAN assignment is based on RADIUS attribute 81, Tunnel-Private-Group-ID, and uses thefollowing standard dot1x procedure:1. The host sends a dot1x packet to the Dell Force10 system.2. The system forwards a RADIUS REQUEST packet containing the host MAC address and ingress portnumber.3. The RADIUS server authenticates the request and returns a RADIUS ACCEPT message with theVLAN assignment using Tunnel-Private-Group-ID.The dynamic VLAN assignment from the RADIUS server always overrides the configuration on theswitch for the given port. This applies to ports already configured with a non-default VLAN.To configure dynamic VLAN assignment with 802.1x port authentication:Note: For the C-Series, S-Series, and E-Series TeraScale platforms, the dynamic VLAN assignment failsif a port is assigned to a non-default VLAN and if the non-default VLAN assignment was configured on anFTOS version earlier than 8.4.2.3.Step Task1 Configure 802.1x globally and at interface level (see Enabling 802.1X on page 112) along with relevant RADIUSserver configurations.2 Make the interface a switchport so that it can be assigned to a VLAN.3 Create the VLAN to which the interface will be assigned.4 Connect the supplicant to the port configured for 802.1X.5 Verify that the port has been authorized and placed in the desired VLAN by entering the show dot1x interfaceand show vlan commands (red text in Figure 7-11).
