- Switch Configuration for 802.1X and Dynamic VLANs
- ISE Settings
- Authorization Profile for Dynamic VLANs
Switch Configuration for 802.1X and Dynamic VLANs
dot1x system-auth-control
encrypted radius-server host 10.10.100.151 key <XXXXXXXX>
radius-server host source-interface vlan<#>
aaa authentication enable authorization default radius
aaa accounting dot1x start-stop group radius
interface gigabitethernet1/1/2
dot1x authentication 802.1x mac
dot1x radius-attributes vlan static
dot1x port-control auto
spanning-tree portfast
switchport mode access
ISE Settings
SG500 does not send the service type so we match only the Radius attribute NAS-Port-Type to meet 802.1X wired condition
Authorization Profile for Dynamic VLANs
By default the “Tag ID” is set to “1”, in this case it needs to be set to “0” as shown below.
The “ID/Name 402” is an example of a random vlan number that was used for the sake of this demonstration, you may set it as required.
