How can I add a field in Cisco ACS 3.3 with VLAN?

[jorge.s]

I'm trying to do Dynamic VLAN Assignment, could you describe what's the best way?

and if possible, how do I set the VLAN fiedl in ACS?

[darpotter]

In ACS group setup, use RADIUS attributes

64, Tunnel-Type = VLAN

65, Tunnel-Medium-Type = 802

81, Tunnel-Private-Group-Id =

Darran

[jorge.s]

and how do I do to use only Macaddress authentication?

[darpotter]

Well it depends on whether your access device supports it.

Aironet APs support mac auth, where you put mac addresses instead of userids into ACS.

In NAC, to authenticate clientless endpoints, the switch/router has a feature called "mac auth bypass" where a pre-configured userid+password is sent to ACS along with the client mac address. ACS then applies NARs to filter on mac address.

Its a shame ACS doesnt have a true mac authentication feature.

So the answer really depends on your access device.