topic Re: Just looking for good documentation to learn about VLAN Assignment. in Network Access Control https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482802#M510640 <HTML><HEAD></HEAD><BODY><P>Not sure if you will find specific documentation on this, but the only thing you need to add to your authorization profiles is a VLAN assignment.&nbsp; Then the rest is just crafting your authorization rules to apply the correct authorization profile that has the VLAN you want assigned.</P><P></P><P>If you are doing centralized wireless, i.e. not FlexConnect, as long as the WLC has an interface on the VLAN assigned from ISE the user will get moved to that VLAN.&nbsp; </P><P></P><P>In FlexConnect it gets a bit tricker.&nbsp; If the VLAN is in use by another SSID then there is no problem assigning the VLAN to a FlexConnect client.&nbsp; If the VLAN isn't used by any WLAN then you first have to "push" the VLAN information out the the FlexConnect AP.&nbsp; The way I have done that in the past is using the AAA VLAN-ACL mapping tab in your FlexConnect group.&nbsp; Add whatever VLANs you need there and assign "none" as the ingress and egress ACL.&nbsp; That will make the AP aware of the VLAN and allow the VLAN assignment in ISE to work.</P></BODY></HTML> Wed, 18 Apr 2018 19:52:09 GMT paul 2018-04-18T19:52:09Z Just looking for good documentation to learn about VLAN Assignment. https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482801#M510639 <HTML><HEAD></HEAD><BODY><P>Can someone lead me to good articles in relation to understanding/configuring VLAN assignment?&nbsp; i.e. one SSID assigning vlan based on AD group and/or network location?</P></BODY></HTML> Wed, 18 Apr 2018 18:17:28 GMT https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482801#M510639 jmilay 2018-04-18T18:17:28Z Re: Just looking for good documentation to learn about VLAN Assignment. https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482802#M510640 <HTML><HEAD></HEAD><BODY><P>Not sure if you will find specific documentation on this, but the only thing you need to add to your authorization profiles is a VLAN assignment.&nbsp; Then the rest is just crafting your authorization rules to apply the correct authorization profile that has the VLAN you want assigned.</P><P></P><P>If you are doing centralized wireless, i.e. not FlexConnect, as long as the WLC has an interface on the VLAN assigned from ISE the user will get moved to that VLAN.&nbsp; </P><P></P><P>In FlexConnect it gets a bit tricker.&nbsp; If the VLAN is in use by another SSID then there is no problem assigning the VLAN to a FlexConnect client.&nbsp; If the VLAN isn't used by any WLAN then you first have to "push" the VLAN information out the the FlexConnect AP.&nbsp; The way I have done that in the past is using the AAA VLAN-ACL mapping tab in your FlexConnect group.&nbsp; Add whatever VLANs you need there and assign "none" as the ingress and egress ACL.&nbsp; That will make the AP aware of the VLAN and allow the VLAN assignment in ISE to work.</P></BODY></HTML> Wed, 18 Apr 2018 19:52:09 GMT https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482802#M510640 paul 2018-04-18T19:52:09Z Re: Just looking for good documentation to learn about VLAN Assignment. https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482803#M510641 <HTML><HEAD></HEAD><BODY><P>ISE Config guide should help you with how to create authorization profile with VLAN based assignment</P></BODY></HTML> Thu, 19 Apr 2018 11:32:23 GMT https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482803#M510641 Nidhi 2018-04-19T11:32:23Z Re: Just looking for good documentation to learn about VLAN Assignment. https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482804#M510642 <HTML><HEAD></HEAD><BODY><P>Thank you for the information.&nbsp; This will definitely get me headed in the right direction.</P></BODY></HTML> Thu, 19 Apr 2018 13:10:00 GMT https://community.cisco.com/t5/network-access-control/just-looking-for-good-documentation-to-learn-about-vlan/m-p/3482804#M510642 jmilay 2018-04-19T13:10:00Z