Solved: Web Authentication Dynamic VLAN Assignment

bhoops · ‎02-18-2009

In a WLC 4402 firmware v.5.2.157 is there any way to assign users to a VLAN dynamically based on the RADIUS response received from the ACS?

Stephen Rodriguez · ‎02-18-2009

Yes and no. you can do this for an internal 802.1x WLAN, as the client does not get an IP address until they have completed the authentication process. For this you use 64/65/81, 64 802 , 65 VLAN and for 81 use the interface name not the VLAN number. you will also need to make sure you have AAA Overrided enabled under the WLAN.

If as this says for Web Authentication, the answer is no. The client has an IP address prior to being validated by the AAA server.

HTH,

Steve

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

View solution in original post

Stephen Rodriguez · ‎02-18-2009

Yes and no. you can do this for an internal 802.1x WLAN, as the client does not get an IP address until they have completed the authentication process. For this you use 64/65/81, 64 802 , 65 VLAN and for 81 use the interface name not the VLAN number. you will also need to make sure you have AAA Overrided enabled under the WLAN.

If as this says for Web Authentication, the answer is no. The client has an IP address prior to being validated by the AAA server.

HTH,

Steve

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

bhoops · ‎02-19-2009

Thanks. I had gathered as much from the documentation but just wanted to make sure there wasn't an alternative method.