Dynamic tagged vlan for port

[suprys]

Hello,

is there a possibility to tag port via Radius/NAC.
For example to receive one default vlan and one or more tagged vlans on port.
I mean, something like dynamic vlan.
I see that I can receive untagged vlan but what about tagged vlan?

Thanks in advance.

~suprys

[one6f]

Hi suprys,

you can get multiple VLANs on the port through Radius. That means that on the port can be learned multiple mac addresses in multiple VLANs.
For this the port must be mobile and 802.1x enabled:
vlan port mobile 1/2
vlan port 1/2 802.1x enable

But there no 802.1q Tag supported on mobile ports.
If you wish to connect a 802.1q switch to the mobile port and transport tagged packets you need to enable the classification of mobile port packets based on 802.1Q VLAN ID tag using the vlan mobile-tag command:
vlan 123 mobile-tag enable
vlan 234 mobile-tag enable
That allows mobile ports to receive 802.1Q tagged packets.
In essence, the VLAN mobile tag attribute provides a dynamic 802.1Q tagging capability. Mobile ports can now receive and process 802.1Q tagged packets destined for a VLAN that has this attribute enabled. This feature also allows the dynamic assignment of mobile ports to more than one VLAN at the same time.

[suprys]

Hi one6f

Thank you for reply. It really helpful.

In case of IP Telephony, I was wondering if there is any possibility to provide dynamically tagged and untagged vlan (802.1x) simultaneously without any additional options on switch…., unfortunately I'm forced to use mobile-tag for voice vlan.

I'm curious is such feature exist on others brands like HP, Cisco, etc..?

Thanks~!

[one6f]

Hi suprys,

here are AVA links.

I'm curious is such feature exist on others brands like HP, Cisco, etc..?

I'm not sure, I believe to have seen that it is AL patent.