topic Re: Radius Server for dynamic vlan assignment by Mac-addresses in Network Access Control

Radius Server for dynamic vlan assignment by Mac-addresses

ITexpert — Wed, 15 Aug 2018 18:59:19 GMT

Hello Guys,

I want to use a Radius server for Dynamic vlan assignment for Wired network by mac-addresses.

I am looking for some sort of radius server which is vendor neutral in terms of 802.1x and mac-based authentication. we are using Cisco switches on one site and Aruba on another sites.

Please write licensing cost if you know ?

Thanks

Re: Radius Server for dynamic vlan assignment by Mac-addresses

paul — Wed, 15 Aug 2018 19:47:26 GMT

The license answer depends on how you identifying the different assets to put on different VLANs. Dot1x and static whitelisted MAC addresses will consume a Base License. If you are using ISE's profiling feature to dynamically put MAC addresses into endpoint groups and are using those endpoint groups in rules that will consume a Base and a Plus license.

I am not going to get into the pitfalls of doing VLAN moves on wired as they are well documented. Just plan on doing closed mode or using CPL template.