ICX MAC based dynamic vlan assignment without radius

[Anonymous]

ICX7150 SPS08080d

I'm trying to assign some intercom devices to VLAN 15 based on a MAC range.

Looks like I'm supposed to enable 802.1x, then use an authentication and mac filter to assign the vlan-id for dynamic assignment. I'm just getting a little lost in the syntax.

[Anonymous]

I figured it out.


!
vlan 1 name DEFAULT-VLAN by port
 no untagged ethe 1/1/1 to 1/1/24
!
vlan 15 by port
 tagged ethe 1/2/1
!
vlan 254 by port
 untagged ethe 1/2/1
!
!
authentication
  auth-default-vlan 254
  mac-authentication enable
  mac-authentication enable ethe 1/1/1 to 1/1/24
!
!
ip address 10.254.110.11 255.255.0.0 dynamic
ip default-gateway 10.254.0.1 dynamic
!
mac filter 1 permit any any
mac filter 15 permit b4fb.0000.0000 ffff.0000.0000 any
!

!
interface ethernet 1/1/1
  auth-filter 15 15
  auth-filter 1
!
interface ethernet 1/1/2
  auth-filter 1
  auth-filter 15 15
!

[michael_brado]

Thanks Chris,

    Your info will be captured in our KBA-9467.

[Anonymous]

FYI, after int e 1/1/x I had to use "mac-auth auth-filter 1".