I am trying to configure autonomous 1131AG access points for dynamic Vlan assignment using Microsoft IAS servers. I have the dynamic assignment working OK as long as the Vlan returned to the AP by the IAS Server is defined in the AP config but here is what I actually need to do.
The plan is to define on the AP's at each site 2 vlans and one ssid.
The first vlan being specific to a site and will only be defined on the AP's for that site. The second vlan will be defined on all access points. The SSID will be defined on all access points.
When a wireless client attempts to authenticate to an access point, the IAS server will return a vlan assignment. If the client's assigned vlan is on the AP everything works perfectly but if the assigned vlan is not defined on the authenticating AP, instead of reverting to the second vlan as I would like, the Access Point fails the authentication and returns the following error.
DOT11-4-NO_VLAN_ID: Vlan id 123 from Radius server is not configured for station 0000.2350.1234.
soooo what am I missing?
I have attached an example of an AP config