01-28-2010 10:18 AM - edited 03-06-2019 09:29 AM
I have a endor is telling me I can vlan tag based on IP address.. ie, if 1.1.1.1/24 hits an accessport, tag it with VLAN1, if 1.2.2.2/24 hits the same access port, tag it with VLAN2.. but since VLANs are at Layer 2, I don't see how this is possible. Would you agree?
The switch is a 3560.
Thanks
01-28-2010 10:43 AM
You can configure a switchport as switchport access dynamic but you do need a VMPS server in your environment.
For more information, please refer to the documentation:
Regards
Edison.
01-28-2010 10:48 AM
It is my understanding that VMPS only dynamically tags based on MAC address, not IP address.. or is this incorrect?
01-28-2010 10:58 AM
You are correct.
While you can dynamically change the switchport access vlan with VMPS relying on the source MAC address, you can't change it relying on the source IP address unless the vendor is trying to sell you some 3rd party product that works along with your switch.
Regards
Edison
01-28-2010 11:12 AM
mjoshbaird wrote:
I have a endor is telling me I can vlan tag based on IP address.. ie, if 1.1.1.1/24 hits an accessport, tag it with VLAN1, if 1.2.2.2/24 hits the same access port, tag it with VLAN2.. but since VLANs are at Layer 2, I don't see how this is possible. Would you agree?
The switch is a 3560.
Thanks
Josh
In addition to VMPS you can also do dynamic vlan assignment with 802.1x and a radius server but as far as i know you can only do this based on user credentials not IP.
Would be interesting to see how the vendor proposes it can be done.
Jon
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide