topic Re: vlan per AP Groups in Network Access Control

vlan per AP Groups

amir-behnous — Mon, 31 Oct 2016 19:54:16 GMT

hi guys,

what is the attribute to use in ISE to assign a vlan based on AP Groups

thanks

Re: vlan per AP Groups

hslai — Tue, 01 Nov 2016 02:47:53 GMT

Assuming you are asking about Cisco WLC, RADIUS Authentication Servers says that

This page displays RADIUS server information for your configured RADIUS server and enables you to edit the Call Station ID Type:

...

– AP Group

...

With the selection of AP Group, you may use RADIUS.Called-Station-Id to match the AP Group string. The VLAN assignment in the resulting authorization profile is the same as the regular -- use the common task [ VLAN ].

Re: vlan per AP Groups

M. Wisely — Tue, 01 Nov 2016 09:55:04 GMT

If you look at an AP Group on a controller, you can configure NAS-ID to match the name of the AP group and then use then use the NAS-Identifier radius attribute to specify a VLAN per AP group.