topic Re: what's configuration i need to do for assign different VLAN to different users via 802.1x on ISE? in Network Access Control https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563019#M510100 <HTML><HEAD></HEAD><BODY><P>If using AD groups, then please create separate authorization policy rules to assign the VLANs.</P><P></P><P>If AD-group-1 then AuthZ-Profile-1-with-VLAN-A</P><P>If AD-group-2 then AuthZ-Profile-2-with-VLAN-B</P><P>...</P></BODY></HTML> Fri, 11 May 2018 13:16:50 GMT hslai 2018-05-11T13:16:50Z what's configuration i need to do for assign different VLAN to different users via 802.1x on ISE? https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563013#M510092 <HTML><HEAD></HEAD><BODY><P>There are two users in this environment , alex &amp; dlink : </P><P><IMG alt="different users.jpg" class="image-1 jive-image" src="/legacyfs/online/fusion/116946_different users.jpg" style="height: 349px; width: 620px;" /></P><P>and i already enable IETF 802.1x on network device profile : </P><P><IMG alt="set permit ietf 802.1x.jpg" class="jive-image image-2" src="/legacyfs/online/fusion/116947_set permit ietf 802.1x.jpg" style="height: 349px; width: 620px;" /></P><P></P><P>but i don't know where i can configure different VLAN to different users ? </P></BODY></HTML> Wed, 09 May 2018 01:43:28 GMT https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563013#M510092 sbmc014 2018-05-09T01:43:28Z Re: what's configuration i need to do for assign different VLAN to different users via 802.1x on ISE? https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563014#M510093 <HTML><HEAD></HEAD><BODY><P>For simple VLAN ID/name, we specify VLAN under the common tasks in an authorization profile. If using a user-attribute, then use the Advanced Attributes Settings for the three tunnel attributes.</P><P><IMG alt="Screen Shot 2018-05-08 at 9.55.00 PM.png" class="image-1 jive-image" height="400" src="/legacyfs/online/fusion/116951_Screen Shot 2018-05-08 at 9.55.00 PM.png" style="height: 399.6516129032258px; width: 376px;" width="376" /></P></BODY></HTML> Wed, 09 May 2018 04:56:52 GMT https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563014#M510093 hslai 2018-05-09T04:56:52Z Re: what's configuration i need to do for assign different VLAN to different users via 802.1x on ISE? https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563015#M510095 <HTML><HEAD></HEAD><BODY><P>thanks for your reply , it can work now , but both of users are assigned the same VLAN , if i want assign different VLAN to different users , where i need to configure ?</P></BODY></HTML> Thu, 10 May 2018 01:25:00 GMT https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563015#M510095 sbmc014 2018-05-10T01:25:00Z Re: what's configuration i need to do for assign different VLAN to different users via 802.1x on ISE? https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563016#M510096 <HTML><HEAD></HEAD><BODY><P>Hi, </P><P></P><P>Confirmation, we've got over 15,000 users, if enable this, is it a default setting for all users, or can we just pick the users we want?</P><P></P><P>cheers</P></BODY></HTML> Thu, 10 May 2018 15:00:03 GMT https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563016#M510096 craiglebutt 2018-05-10T15:00:03Z Re: what's configuration i need to do for assign different VLAN to different users via 802.1x on ISE? https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563017#M510098 <HTML><HEAD></HEAD><BODY><P>Here is a post showing an example how you can assign a vlans per user</P><P><A href="https://community.cisco.com/docs/DOC-74212">Dynamic Attribute with ISE: VLAN Assignment</A></P></BODY></HTML> Thu, 10 May 2018 16:25:17 GMT https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563017#M510098 ldanny 2018-05-10T16:25:17Z Re: what's configuration i need to do for assign different VLAN to different users via 802.1x on ISE? https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563018#M510099 <HTML><HEAD></HEAD><BODY><P>cheers for this, spot on.</P><P>only question is, playing on a test server, our DC Team wonder if can do this by security group and add users in to it instead of by AD attribute for user?</P><P>Cheers</P></BODY></HTML> Fri, 11 May 2018 12:24:05 GMT https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563018#M510099 craiglebutt 2018-05-11T12:24:05Z Re: what's configuration i need to do for assign different VLAN to different users via 802.1x on ISE? https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563019#M510100 <HTML><HEAD></HEAD><BODY><P>If using AD groups, then please create separate authorization policy rules to assign the VLANs.</P><P></P><P>If AD-group-1 then AuthZ-Profile-1-with-VLAN-A</P><P>If AD-group-2 then AuthZ-Profile-2-with-VLAN-B</P><P>...</P></BODY></HTML> Fri, 11 May 2018 13:16:50 GMT https://community.cisco.com/t5/network-access-control/what-s-configuration-i-need-to-do-for-assign-different-vlan-to/m-p/3563019#M510100 hslai 2018-05-11T13:16:50Z