Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Web Authentication Dynamic VLAN Assignment

In a WLC 4402 firmware v.5.2.157 is there any way to assign users to a VLAN dynamically based on the RADIUS response received from the ACS?

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Web Authentication Dynamic VLAN Assignment

Yes and no. you can do this for an internal 802.1x WLAN, as the client does not get an IP address until they have completed the authentication process. For this you use 64/65/81, 64 802 , 65 VLAN and for 81 use the interface name not the VLAN number. you will also need to make sure you have AAA Overrided enabled under the WLAN.

If as this says for Web Authentication, the answer is no. The client has an IP address prior to being validated by the AAA server.

HTH,

Steve

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
2 REPLIES

Re: Web Authentication Dynamic VLAN Assignment

Yes and no. you can do this for an internal 802.1x WLAN, as the client does not get an IP address until they have completed the authentication process. For this you use 64/65/81, 64 802 , 65 VLAN and for 81 use the interface name not the VLAN number. you will also need to make sure you have AAA Overrided enabled under the WLAN.

If as this says for Web Authentication, the answer is no. The client has an IP address prior to being validated by the AAA server.

HTH,

Steve

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
Community Member

Re: Web Authentication Dynamic VLAN Assignment

Thanks. I had gathered as much from the documentation but just wanted to make sure there wasn't an alternative method.

443
Views
0
Helpful
2
Replies
CreatePlease to create content