Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

dot1x with dynamci vlan assignment

I hoping someone could point me to a configuration example on how to dynamically assign a VLAN on a switchport interface configured for dot1x authentication.

We have mostly Catalyst 3550 switches, and using Cisco Secure ACS 3.3.1 as our Radius server

2 REPLIES
New Member

Re: dot1x with dynamci vlan assignment

Thanks for the reply JG. I guess its my fault for not being more specific. Let me give all the details of what I'm trying to accomplish with dyanamic VLAN assigment, so you can provide a more informed responsed.

The goal is to be able to connect one of our mobile video conference (VC) units which support dot1x authetication, into any switch in the office and end up on VLAN 100 for example. Of course I already have all my users in the same office using dot1x authetication and end up on VLAN 200 for example when they pass authentication.

We currently use 2 indentically configured Cisco ACS servers to provide radius authetication for all of our offices, and the user vlan number is different in every office, but the VC vlan number is the same for every office.

What I'm hoping for, is that I DONT have to create a group for every office in order to assign the correct vlan for my users and the VC units, but have my user vlan be the default VLAN, unless a VC unit is authenticated and then assign it to VLAN 100.

Hopefully this is enough detail, let me know if you have any questions.

Thanks,

Earl D

116
Views
0
Helpful
2
Replies