topic Re: WLC Web-Auth, ACS & VLAN Assignment in Wireless

WLC Web-Auth, ACS & VLAN Assignment

aizudin_aliyeon — Sat, 03 Jul 2021 22:43:20 GMT

I have cisco lwapp setup with wlc and acs server. In the ACS i have two user groups provisioned. At the WLC, I have 1 SSID each for these two groups.

The target is to get each users in the pecified group eg group 1, to get into vlan 1. And the same goes to group 2 and vlan 2.

Right now, everyone can logon into any ssid using username from any group. We are using the web-auth method.

Any idea on how to restrict the users in specific group into a specific vlan?

Re: WLC Web-Auth, ACS & VLAN Assignment

bbxie — Tue, 15 Apr 2008 04:26:24 GMT

although cisco's Identity Network can allocate different VLAN according to username, but it doesn't support web-auth, only support MAC filtering, 802.1X, and WPA at this moment. So if you have to use web-auth, the answer is no, if you can change it to be others such as 802.1x, you can do it by configure following tunnel attributes in ACS:

â€¢ Tunnel-Type=VLAN (13)

â€¢ Tunnel-Medium-Type=802

â€¢ Tunnel-Private-Group-ID=VLANID

Re: WLC Web-Auth, ACS & VLAN Assignment

aizudin_aliyeon — Tue, 15 Apr 2008 06:45:07 GMT

yes. right.

I did that but seems doesn't work when authed using web-auth. Changing to other security method is not an option right now as the web-auth is more presentable to end users and less hassle to connect to the network itself.