Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation

Configuring the RADIUS NAS-Port Extended Format per Physical Interface

As an alternative to globally configuring the extended format for the NAS-Port (5) RADIUS attribute in an access profile, you can configure the NAS-Port extended format on a per-physical interface basis as part of a NAS-Port options definition. The NAS-Port extended format configures the number of bits (bit width) in each field in the NAS-Port attribute, including: slot, adapter, port, VLAN, and S-VLAN.

Configuring NAS-Port options definitions on a per-physical interface basis is useful in network configurations that use a 1:1 access model or an N:1 access model.

To configure an extended format for the NAS-Port RADIUS attribute per physical interface:

  1. Specify the interface you want to configure.
    [edit]user@host# edit interfaces interface-name
  2. Enable VLAN tagging on the interface.
    [edit interfaces interface-name]user@host# set vlan-tagging

    Setting VLAN tagging enables the reception and transmission of 802.1Q VLAN-tagged frames on the interface. You must enable VLAN tagging before you can configure the VLAN ranges to which the NAS-Port options definition applies.

  3. Specify that you want to configure RADIUS options for a physical interface.
    [edit interfaces interface-name]user@host# edit radius-options
  4. Create a named NAS-Port options definition.
    [edit interfaces interface-name radius-options]user@host# edit nas-port-options nas-port-options-name
  5. Configure the NAS-Port extended format.
    [edit interfaces interface-name radius-options nas-port-options nas-port-options-name]user@host# set nas-port-extended-format slot-width width adapter-width width port-width width vlan-width width
  6. Configure the VLAN range or ranges to which the NAS-Port options definition applies.
    [edit interfaces interface-name radius-options nas-port-options nas-port-options-name]user@host# set vlan-ranges (any | low-tag–high-tag)

    Per-physical interface configurations typically require you to create a VLAN range that consists of all VLAN IDs on the physical interface. To do so, use the any option with the vlan-ranges statement.

The following example shows a per-interface NAS-Port options definition named boston-subscribers that configures a NAS-Port extended format consisting of an 8-bit slot field, 8-bit adapter field, 8-bit port field, and 4-bit VLAN field. The boston-subscribers definition applies to a VLAN range consisting of all VLAN IDs on Gigabit Ethernet physical interface ge-2/0/1.

[edit interfaces ge-2/0/1 radius-options]
nas-port-options boston-subscribers {nas-port-extended-format {slot-width 8;adapter-width 8;port-width 8;vlan-width 4;}vlan-ranges {any;}}
 

Related Documentation

 

Published: 2013-02-11

Previous Page Next Page