Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
What RADIUS Attributes Need to Be Delivered for VLAN-based Authorization?
When a RADIUS server delivers dynamic VLANs, it must also deliver three attributes:
- No. 64: Tunnel-Type, which is of Integer type and has a fixed value 13
- No. 65: Tunnel-Medium-Type, which is of Integer type and has a fixed value 6
- No. 81: Tunnel-Private-Group-Id, which is of String type and has a value of the specific VLAN or the description of the VLAN created on the device
As shown in the following figure, the RADIUS server delivers dynamic VLAN 100, which is of String type and represented by the ASCII code 0x31 0x30 0x30 (marked in the red box). However, some servers deliver the hexadecimal form of 100, that is, 0x64, which does not comply with the RFC standard and therefore cannot be identified by the device.
