Comware

 View Only
  • 1.  issue dynamic vlan assignment with radius on hpe 1920s

    Posted Aug 17, 2021 10:12 PM

    please help me.

    i was config my switch hpe 1920s as authenticator.

    my config, port access :

    - admin mode=enable

    - vlan assignment mode = enable

    - dynamic vlan creation mode = enable

    - monitor mode = enable

    - EAPOL flood mode = disable

     

    i was create vlan 10 and 20, tagged to interface for supplicant. i dont know why the supplicant always getting assign vlan 1. the notification is dot1x authentication failure. i dont know the format mac address for registering to radius. i'm using format xxxxxxxxxxxx lowercase.

    thank you


    #Aruba
    #Port


  • 2.  RE: issue dynamic vlan assignment with radius on hpe 1920s

    Posted Aug 17, 2021 10:31 PM

    Hello @Ikhsan ,

     

    I believe you have to assign vlan from drop down list to particular port.

    VLAN-->Port Membership

     

    Sim.JPG

     

    Thanks!



  • 3.  RE: issue dynamic vlan assignment with radius on hpe 1920s

    Posted Aug 17, 2021 10:36 PM

    hello @akg7 

    thanks, it must be config untag or tag? interface for supplicant i config vlan 1 untag, 10 tag, and 20 tag.

    can you tell me specific configuration what i should to do it?

    thanks

     



  • 4.  RE: issue dynamic vlan assignment with radius on hpe 1920s

    Posted Aug 17, 2021 10:40 PM

    Hello @Ikhsan ,

    Tagged--Trunk Port

    Untagged--Access Port

     

    If supplicant on VLAN 10 and VLAN 20  is host then yes it should be untagged.

     

    Thanks!



  • 5.  RE: issue dynamic vlan assignment with radius on hpe 1920s

    Posted Aug 17, 2021 10:45 PM

    @akg7 

    i tried tag all vlan on interface supplicant, but the notification dot1x failure. and authenticator always assign vlan 1.

    thanks



  • 6.  RE: issue dynamic vlan assignment with radius on hpe 1920s

    Posted Aug 17, 2021 10:51 PM

    Hello @Ikhsan ,

    First you can check if VLAN 10 and VLAN 20 is binded to those itnerfaces or not?

    Go to  VLAN-->Port Membership and from drop down VLAN ID  select vlan 10 and select the interfaces which you bind to vlan 10 and click on edit and select untagged and include.

    Repeat same for VLAN 20.

    Thanks!



  • 7.  RE: issue dynamic vlan assignment with radius on hpe 1920s

    Posted Aug 18, 2021 12:06 AM

    its mean vlan static, right? i mean from my post is i want to assign dynamic vlan. if i register my mac add pc on radius server, and i assign vlan 10, that pc will automatic getting vlan 10 when i plug the cable anywhere.

    thanks



  • 8.  RE: issue dynamic vlan assignment with radius on hpe 1920s

    Posted Aug 18, 2021 02:05 AM

    Hello,

    Alright, Is this the exact error or some few more words are there - 'dot1x authentication failure' ?

    Please share logs from device?

    Thanks!