Comware

 View Only

  • 1.  Setting VLAN on HPE 5140 via RADIUS

    Posted May 05, 2025 05:26 AM

    Hi Forum,

    I want to set a Port on a HPE 5140 COMWARE Switch via RADIUS after successful authentication via MAB or dot1x (MACMON NAC).

    I got this working for AOS and AOS-X Switches (Vendor-ID 11, Attribute-ID 64 / 65, "HP-Egress-VLANID" / "HP-Egress-VLAN-Name").

    But I don't get it running for COMWARE.

    I tried the same Vendor-Specific Attribute-IDs and the IETF Attributes EGRESS-VLANID / EGRESS-VLAN-NAME, but no luck.

    A difference I recognized is, that for AOS I need to set another Vendor-Specific Attribut (Vendor-ID 11, Attribute-ID 14, "HP-MA-Port-Mode").

    I didn't find anything similiar in the 3com/H3C/Huawei Vendor-Dictionary (exept for 3com' Attribute-ID2, "3Com-VLAN-Name").

    What am I missing? Has anybody an idea or a hint to get this running?

    Thanks in advance for any piece of information!

    Regards, Thorsten



  • 2.  RE: Setting VLAN on HPE 5140 via RADIUS

    Posted May 06, 2025 01:47 AM

    I think the RADIUS Handling messages between Comware and AOS/AOS-X are different. Comware typically supports:

    Tunnel-Type (IETF, Attr 64) = VLAN (value 13)
    Tunnel-Medium-Type (IETF, Attr 65) = 802 (value 6)
    Tunnel-Private-Group-ID (IETF, Attr 81) = <VLAN-ID or VLAN Name>

    as an example:
    Tunnel-Type = VLAN,
    Tunnel-Medium-Type = IEEE-802,
    Tunnel-Private-Group-ID = "30"

    This would put you to VLAN30



    ------------------------------
    Shpat | ACEP | ACMP | ACCP | ACDP
    Just an Aruba enthusiast and contributor by cases
    If you find my comment helpful, KUDOS are appreciated.
    ------------------------------

    Original Message


  • 3.  RE: Setting VLAN on HPE 5140 via RADIUS

    Posted May 06, 2025 02:08 AM

    Thanks a lot! I will give this a try and report back!


    Original Message


  • 4.  RE: Setting VLAN on HPE 5140 via RADIUS

    Posted May 06, 2025 02:45 AM

    Hmm... just wondering... If I want to tag other VLANs on that specific Port, how would I do that?

    In your example, the VLAN30 would be Untagged on that Port, wouldn't it?

    Regards, Thorsten


    Original Message


  • 5.  RE: Setting VLAN on HPE 5140 via RADIUS
    Best Answer

    Posted May 06, 2025 02:54 AM

    VLAN30 would be Untagged.

    If you refer to pushing multiple VLANs on the same port, i am afraid that you can't push a RADIUS Attribute forcing the port to be Trunk and permitting multiple VLANS as tagged.



    ------------------------------
    Shpat | ACEP | ACMP | ACCP | ACDP
    Just an Aruba enthusiast and contributor by cases
    If you find my comment helpful, KUDOS are appreciated.
    ------------------------------

    Original Message


  • 6.  RE: Setting VLAN on HPE 5140 via RADIUS

    Posted May 09, 2025 10:38 AM

    Does the COMWARE-OS implement Vendor-Specific (Huawei/3com/H3C) Attributes?

    I found an Attribute "H3C-Command" (Vendor H3C, Vendor-ID: 25506, Attribute-ID: 20) and was thinking: would it be possible to "reconfigure" a switchport via a "Command"-Attribute?

    Regards, Thorsten


    Original Message


Related Content