Several customers have been asking us to implement Change of VLAN for wired guests. Till date we have discouraged customers from implementing this capability from ISE as it is difficult/impossible to implement by sending a VLAN in Radius Authorization due to the issues with renewing IP Address for MAB authentication.
We have developed a solution based on Smart Port Macros and have tested this in our lab. The attached ppt provides details of the this solution and associated configuration in ISE and switch.
The solution was validated in our lab running ISE 2.1 patch 2 and 3650 running 3.7.5
