As far as I know anb based on some esperience in a test environment it seems that cisco ISE among two load balancing radius kind of attributes supports only vlan gropu assignment, this means that on the switches vlan group assignment is required.
A second method of passing multiple vlans or vlan IDs by radius attributes is not allowed.
Am I wrong?
The issue I'm trying to overcome is the following
Subnet1 /24
Subnet2 /22
Many, many switches
(and the situation can't be changed)
Assuming the vlan assignment is local to the switch and with a round robin method, once the IPs are exhausted on Subnet1 only half of the clients that authenticate will obtain an IP (on Subnet2) while the rest will get stuck on Subnet1 without an IP
The same situation comes up when considering an odd number of authenticated clients on every switch and with two /24 subnets: it is likely possible that Subnet1 will be "full" before the second subnet does falling in the previous situation.
is there any solution?
thank you in advance
