802.1X NPS Dynamic VLAN Assignment

[Jon Eyes]

Hi Everyone,

We're trying to configure a port-based authentication wherein user's successful login lands it on their assigned vlan. Please refer to the diagram. We've successfully done this over our wireless network, but the connection to the AP is trunked to enable it to land it's client to different vlan

So we;re wondering how can we apply the same behavior in the wired network without turning the switchport into a trunk?

Thanks everyone in advance

Jon 

[Francesco Molino · Accepted solution]

Hi

I don't get why you had to put your AP interface as trunk. Are there Cisco AP with WLC?

Anyways, for wired, you will keep your ports facing your clients as access port and configure your policies on your NPS to push the right vlan based on user/computer authentication.