Our access point is ap1240 and using radius server to authenticate users. I'm trying to assign vlan based on the user authentication by using radius attributes 64, 65 and 81 described in
http://cisco.com/en/US/products/hw/wireless/ps430/products_configuration_guide_chapter09186a0080607188.html#wp1038739
but this seems to be not working. I am using WPA with TKIP and key rotation. If I don't set these aaa attributes users are authenticated and placed in the default vlan assigned to the SSID. If I set the attributes but keep the VLAN ID the same as the one one assigned to SSID then the user is connected no problem.
In the guide (above link) there is a note about this feature not working when cipher suite is different and if you are using WPA or CCKM. Is this what is happening with my case here?
fred
