Doing dot1x on LAN with ISE and IBNS 2.0 mode there are 3 ways setting up parameters as vlan and ACL during authorization as far as I understood. 1) you can just return the good radius arguments in your ISE response without using any service templat...