on the WS-C2950G-24-E1,define dot1X,now user can pass the authen,but user can get right vlan why?
can everyone give some example config the 802.1X on the swith.
or the switch can't support dynamic ass vlan with the radius.
what version of IOS are you using ? This feature is supported only on Enhanced Images...
you say that your normal dot1x works good, but only the dynamic port assignment using radius doesnt work ? am i right..
configure the following on your ACS server:
– Tunnel-Type = VLAN
– Tunnel-Medium-Type = 802
– Tunnel-Private-Group-ID = VLAN name or VLAN ID
you need to send the radius vsa attributes to and from the switch.. do a debug dot1x and debug radius to see the exact flow of traffic to & from radius server.. can you share your configurations please ?
You can look at the following URL for more info:
Hope this helps.. all the best