topic Re: ICX MAC based dynamic vlan assignment without radius in ICX Switches

ICX MAC based dynamic vlan assignment without radius

chris_thomas_68 — Wed, 19 Jun 2019 18:30:20 GMT

ICX7150 SPS08080d

I'm trying to assign some intercom devices to VLAN 15 based on a MAC range.

Looks like I'm supposed to enable 802.1x, then use an authentication and mac filter to assign the vlan-id for dynamic assignment. I'm just getting a little lost in the syntax.

Re: ICX MAC based dynamic vlan assignment without radius

chris_thomas_68 — Thu, 20 Jun 2019 19:37:43 GMT

I figured it out.

!
vlan 1 name DEFAULT-VLAN by port
no untagged ethe 1/1/1 to 1/1/24
!
vlan 15 by port
tagged ethe 1/2/1
!
vlan 254 by port
untagged ethe 1/2/1
!
!
authentication
  auth-default-vlan 254
  mac-authentication enable
  mac-authentication enable ethe 1/1/1 to 1/1/24
!
!
ip address 10.254.110.11 255.255.0.0 dynamic
ip default-gateway 10.254.0.1 dynamic
!
mac filter 1 permit any any
mac filter 15 permit b4fb.0000.0000 ffff.0000.0000 any
!

!
interface ethernet 1/1/1
  auth-filter 15 15
  auth-filter 1
!
interface ethernet 1/1/2
  auth-filter 1
  auth-filter 15 15
!

Re: ICX MAC based dynamic vlan assignment without radius

michael_brado — Mon, 24 Jun 2019 21:02:14 GMT

Thanks Chris,

Your info will be captured in our KBA-9467.

Re: ICX MAC based dynamic vlan assignment without radius

mike_penrod — Thu, 13 Feb 2020 21:43:26 GMT

FYI, after int e 1/1/x I had to use "mac-auth auth-filter 1".