configure dynamic vlan on AP

[jawwalit]

dear sir:

i am using ACS 3.3 (radius) and ap 1200, how can i configure them as when the user login using EAP, it goes to specific vlan.

regards

[b.hsu]

VLANs provide the segmentation services traditionally provided by routers in LAN configurations. VLANs address scalability, security, and network management. You should consider several key issues when designing and building switched LAN networks:

1. LAN segmentation

2. Security

3. Broadcast control

4. Performance

5. Network management

6. Communication between VLANs

For information on how to configure VLANs on APs have a look at the following URL.

http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a00802091ba.html

[d.nogueira]

Hi.

You must add some RADIUS attributes on your ACS that allows to dinamically set the VLAN to a user or group, because they aren't avaialable by default:

Those attributes are:

Tunnel-Type = "1:VLAN"

Tunnel-Medium-Type = "1:802"

Tunnel-Private-Group-ID = "1:VLANID"

Try to find the settings of RADIUS on your ACS (don't remember the menu item).

Don't forget to configure a 802.1q trunk on your AP with all the VLAN's you need, configure the switch with the same trunk, and have a DHCP server configured with scopes for each VLAN. Probably you will need a DHCP relay to forward the dhcp requests to your server.

Regards,

João