Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NPS, DHCP, and multiple VLANs

I have a client who's network is divided (with VLANs) by floor in their building. With dot1x authentication enabled all users are leasing an IP address from the first DHCP pool regardless of how the port is tagged.

So for instance, VLAN 700 is the 2nd floor VLAN. A user on the 3rd floor connects to a port tagged for VLAN 720, they authenticate through NPS and then receive an IP address from 700. (DHCP is installed on the NPS server)

Everything I have found online about 802.1x VLAN assignment suggests that you can assign a VLAN during authentication, but I haven't found anything that would help me tell the server which DHCP scope to lease addresses from based on how the port is already tagged on the switch. If there is a way to do this I would appreciate a nudge in the right direction. Thanks in advance!


Hi,Has the DHCP server been


Has the DHCP server been configured with your user vlan scopes under a SUPERSCOPE ?

If this is the case then take the vlan scopes out of the SUPERSCOPE.

SUPERSCOPES are not used when we want individual vlans to be scopes in their own right.

Worth having a look.

Hope this helps

Please rate usefuol posts

Regards, Alex. Please rate useful posts.
New Member

They are not using Superscope

They are not using Superscope.

CreatePlease login to create content