Access for specific AD users

[jacksonajax]

Hi,

If I want to authorize users from a specific AD group access to a specific VLAN do I need to have that VLAN configured as an interface on the WLC?

Thanks,

-Jack

[Marvin Rhoads · Accepted solution]

No you don't. You just need to have an Airespace ACL that's assigned to the user session by your policy server (e.g., ISE or ACS). The ACL will restrict all users except the authorized ones from accessing the destination subnet that's associated with the VLAN.

You could also alternatively use Scalable Group Tags (SGTs).