# Configuring NSNA per VLAN

Use this procedure to configure NSNA on a VLAN basis.

Important

VLANs that you plan to configure as NSNA VLANs must be empty (that is, they have no port members assigned). NSNA VLANs cannot be associated with non-NSNA ports; therefore you cannot assign non-NSNA ports manually to enabled NSNA VLANs.

Dumb and static devices that cannot authenticate through tunnel guard can be connected to NSNA dynamic ports. To ensure network access for these devices, add the MAC addresses to the SNAS MAC database.

For more information about NSNA, refer to Avaya Ethernet Routing Switch 5000 Series Configuration - Security, NN47200-501.

## Procedure steps

1. From the navigation tree, double-click VLAN.

2. From the VLAN tree, double-click VLANs.

3. Select the NSNA tab.

4. Select a VLAN to modify.

5. Double click the NsnaColor field. A menu appears.

6. Select one of the following options from the menu:

   - none

   - red

   - green

   - yellow

   - voip

   Important

   Although each switch can have multiple Yellow, Green, and VoIP VLANs, each switch must have only one Red VLAN.

7. In the other columns, enter parameters compatible with the NsnaColor selection.

8. Click Apply.