web authentication, failed auth vlan ?

lionellemaire — Sat, 03 Jul 2021 21:33:09 GMT

Hello,

It is possible to use the radius database for people who have a login, upon successful authentication the people are allowed on a vlan.

Is it possible to allow the users that don't have a radius login on the wireless lan, but on a different vlan ? or apply different acl ?

this is like the guest vlan in the wired context. users that failed authentication are allowed on a different vlan.

Re: web authentication, failed auth vlan ?

ebreniz — Mon, 03 Sep 2007 15:44:05 GMT

Make sure that the RADIUS server always connects behind an authorized port and also

Enable 802.1x authentication and associated features on FastEthernet ports.

Connect RADIUS server to VLAN 10 behind FastEthernet port 3/1.

DHCP server configuration for two IP pools, one for clients in VLAN 2 and other for clients in VLAN 3.

Inter-VLAN routing to have connectivity between clients after authentication.