Cisco WLC5520

[Jay233]

Hi All,

Please help - Need verification that the WLC 5520 can do SGT in parallel with dynamic VLAN assignment.

Cheers, 

[Rasika Nayanajith]

As per this , it should supported as SGT works when you enable AAA override (where dynamic vlan assignment done as part of AAA override)

Note that the Cisco TrustSec security group tag is applied only when you enable AAA override on a WLAN.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/cisco_wlc_security.html 

HTH

Rasika

*** Pls rate all helpful responses ***

[Jay233]

Hi Rasika,

Many thanks for the reply, just to confirm the TrustSec solution:

Components: ISE, 9500, 9200, 5520.

That dynamic vlan assignment is feasible using in-line SGT features having a consistent vlan (IP Subnet) model assigned for all users irrespective of their location or the connection method used (Wired or Wireless).

E.G.

HR - VLAN 10 - SGT 10 (wired and wireless)

R&D - VLAN 20 - SGT 20  (wired and wirless)

VIP Corp - VLAN 30 - SGT 30 (wired and wireless)

Appreciate the support.