Operation Manual – AAAH3C S3100 Series Ethernet Switches Chapter 2 AAA Configuration2-8Table 2-6 Configure dynamic VLAN assignmentOperation Command RemarksEnter system view system-view —Create an ISP domainand enter its view domain isp-name —Set the VLAN assignmentmodevlan-assignment-mode{ integer | string }OptionalBy default, the VLANassignment mode isinteger.Create a VLAN and enterits view vlan vlan-id —Set a VLAN name forVLAN assignment name stringThis operation is requiredif the VLAN assignmentmode is set to string.Caution:z In string mode, if the VLAN ID assigned by the RADIUS server is a character stringcontaining only digits (for example, 1024), the switch first regards it as an integerVLAN ID: the switch transforms the string to an integer value and judges if the valueis in the valid VLAN ID range; if it is, the switch adds the authenticated port to theVLAN with the integer value as the VLAN ID (VLAN 1024, for example).z To implement dynamic VLAN assignment on a port where both MSTP and 802.1xare enabled, you must set the MSTP port to an edge port.z This function is not supported on the S3100-C-EPON-EI Series Ethernet Switches.2.1.5 Configuring the Attributes of a Local UserWhen local scheme is chosen as the AAA scheme, you should create local users onthe switch and configure the relevant attributes.The local users are users set on the switch, with each user uniquely identified by a username. To make a user who is requesting network service pass local authentication, youshould add an entry in the local user database on the switch for the user.
