topic Re: radius dynamic vlan assignment in Wireless

radius dynamic vlan assignment

Chewbakka1 — Thu, 19 Aug 2021 08:54:09 GMT

Hi,

Quick question, when assigning vlans dynamically to wireless clients based on different radius profiles, are dotq1 tagging required on the access-points?

Re: radius dynamic vlan assignment

Mark Elsen — Thu, 19 Aug 2021 09:00:25 GMT

- Not if a controller is used and or the ap's are lightweight

Re: radius dynamic vlan assignment

Tony Rosolek — Thu, 19 Aug 2021 10:14:03 GMT

Depends on operating mode of the AP. In FlexConnect mode the AP is connected to a trunk port and required VLANs must be available and allowed on the access switch. In regular mode, the APs are connected to access ports (no dot1q) and traffic is tunneled via CAPWAP to the WLC and the VLANs need to be available there.

Re: radius dynamic vlan assignment

Chewbakka1 — Thu, 19 Aug 2021 13:49:52 GMT

Alright, The scenario i'm describing is a Flexconnect based solution. So the question is if you are required to enable dot1q taggin on the wireless side, towards the clients

Re: radius dynamic vlan assignment

Rich R — Thu, 19 Aug 2021 16:51:27 GMT

If you use flex with local switching (traffic breaks out to the VLAN locally on the AP switchport) then YES.

If you use flex with central switching (traffic is tunnelled to the WLC) then NO, that's the same as local mode.

Note each WLAN can be configured differently. You can have centrally and locally switched WLANs on the same AP - then you'll need tagging for the locally switched WLAN. The centrally switched, tunnelled traffic will use the native (untagged) VLAN.