802.1x with /21 subnet

[vidals]

Hello,

I am currently deploying 802.1x using following devices:

XP - HP Procurve - Cisco ACS - Active Directory

I am able to forward dynamic vlan id to employe and consultant after authentication.

Bit how to deal with big site having a large number of people?

Without 802.1x, they are splitted in class C subnet to restrict obvious big subnet limitation like broadcast domain.

How to assign a pool of vlans to one group of users instead of 1 vlan?

Thanks for your help.Stephane

[wong34539]

802.1X authenticated ports are assigned to a VLAN that is based on the username of the host that is connected to the port. VLAN assignments work with the RADIUS server, which has a database of username-to-VLAN mappings. After a successful 802.1X authentication of the port, the RADIUS server sends the VLAN in which the user needs to be given access.

Refer to http://www.cisco.com/en/US/products/hw/switches/ps4324/products_configuration_guide_chapter09186a00801eca01.html#wp998917

[jafrazie]

Architecturally, performing the VLAN Assignment by name mitigates this concern and allows for flexibility in this regard. 802.1X should not require you to build a specific VLAN/VTP architecture for subnetting. Ideally, it should work with what you already have. This is supported on all Cisco Catalyst switches.