Radius Server for dynamic vlan assignment by Mac-addresses

[ITexpert]

Hello Guys,

I want to use a Radius server for Dynamic vlan assignment for Wired network by mac-addresses.

I am looking for some sort of radius server which is vendor neutral in terms of 802.1x and mac-based authentication. we are using Cisco switches on one site and Aruba on another sites.

Please write licensing cost if you know ?

Thanks

[paul · Accepted solution]

The license answer depends on how you identifying the different assets to put on different VLANs.  Dot1x and static whitelisted MAC addresses will consume a Base License.   If you are using ISE's profiling feature to dynamically put MAC addresses into endpoint groups and are using those endpoint groups in rules that will consume a Base and a Plus license.

I am not going to get into the pitfalls of doing VLAN moves on wired as they are well documented.  Just plan on doing closed mode or using CPL template.