Dynamic VLAN assignment using dot1x RADIUS authentication with EHS
Dynamic VLAN assignment using dot1x RADIUS authentication with EHS is only supported on the 7210 SAS-Sx/S 1/10GE (standalone).
On the 7210 SAS, users can assign a VLAN using the RADIUS tunnel attribute. Only the VLAN is returned by RADIUS, while other policies (such as QoS, ACLs, or accounting) are not. The locally configured policies can be applied when the VLAN ID is used to configure the SAP after a successful authentication of the host using dot1x (including MAC authentication).
See the 7210 SAS-Mxp, S, Sx, T Services Guide and 7210 SAS-Mxp, R6, R12, S, Sx, T System Management Guide for more information and configuration guidelines on dynamic VLAN assignment using dot1x RADIUS authentication with the event handling system (EHS).