Got it

VLAN pool

Created: Feb 24, 2020 09:36:42Latest reply: Oct 12, 2021 16:38:03 675 4 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hello,

We are using the VLAN pool, the VLAN is dynamically allocated to the users now. But we cannot control the VLANs allocated to users accord to the users' mac by VLAN pool. The DHCP server allocate the incorrect IP address to the users. For example, the users request IP address in VLAN20, but the DHCP server allocate an IP address belongs to VLAN10. 

#

vlan pool WDWLANGROUP

 vlan 10 20 30

#

vap-profile name WDWLAN

  service-vlan vlan-pool WDWLANGROUP

  permit-vlan vlan-id 10 20 30

  ssid-profile WDWLAN

  traffic-profile WDWLAN

  authentication-profile WDWLAN

  dhcp centralized-control enable

  ip source check user-bind enable

  arp anti-attack check user-bind enable

  dhcp option82 insert enable

  nd trust port

  anti-attack flood other-broadcast blacklist enable

  layer3-roam disable

  learn-client-address ipv6 disable

  learn-client-address dhcp-strict blacklist enable


This is my problem, can anyone help me? Thank you!

Featured Answers
Popeye_Wang
Admin Created Feb 24, 2020 09:53:47

Hello,

The product link about VLAN pool function:

https://support.huawei.com/hedex/pages/EDOC1100064350AEI0130Q/05/EDOC1100064350AEI0130Q/05/resources/dc/vlan_pool.html?ft=0&fe=10&hib=10.1.8.161&id=vlan_pool&text=vlan pool&docid=EDOC1100064350

vlan pool

STAs are dynamically assigned to VLANs in the VLAN pool. To ensure that the mapping between VLANs and users is correct, there are two ways.

1. Do not use the VLAN pool in VAP-profile, just fix a VLAN for the users.

2. Configure the Authorization VLAN according to the users in the radius server, the user will allocate the VLAN by the radius server. The relate radius attribute is 64, 65, 81

 

vlan pool

vlan pool

https://support.huawei.com/hedex/pages/EDOC1100064350AEI0130Q/05/EDOC1100064350AEI0130Q/05/resources/dc/dc_fd_aaa_0011.html?ft=0&fe=10&hib=8.1.24.3.2.4.8&id=dc_fd_aaa_0011_3&text=RADIUS Attributes&docid=EDOC1100064350


Or you can adjust the DHCP server and allocate the IP accord to the VLAN which user requests.


View more
  • x
  • convention:

All Answers

Hello,

The product link about VLAN pool function:

https://support.huawei.com/hedex/pages/EDOC1100064350AEI0130Q/05/EDOC1100064350AEI0130Q/05/resources/dc/vlan_pool.html?ft=0&fe=10&hib=10.1.8.161&id=vlan_pool&text=vlan pool&docid=EDOC1100064350

vlan pool

STAs are dynamically assigned to VLANs in the VLAN pool. To ensure that the mapping between VLANs and users is correct, there are two ways.

1. Do not use the VLAN pool in VAP-profile, just fix a VLAN for the users.

2. Configure the Authorization VLAN according to the users in the radius server, the user will allocate the VLAN by the radius server. The relate radius attribute is 64, 65, 81

 

vlan pool

vlan pool

https://support.huawei.com/hedex/pages/EDOC1100064350AEI0130Q/05/EDOC1100064350AEI0130Q/05/resources/dc/dc_fd_aaa_0011.html?ft=0&fe=10&hib=8.1.24.3.2.4.8&id=dc_fd_aaa_0011_3&text=RADIUS Attributes&docid=EDOC1100064350


Or you can adjust the DHCP server and allocate the IP accord to the VLAN which user requests.


View more
  • x
  • convention:

can you share the topology
View more
  • x
  • convention:

very interesting, thanks
View more
  • x
  • convention:

#EncuentraComunidadEnterprise2021
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.