dynamic vlan assignment -wpa2

[bluesea2010]

Hi,

I currently have three separate WPA2-PSK SSIDs, each mapped to a different VLAN.

I want to consolidate them into a single SSID and use Cisco ISE to assign VLANs dynamically.

Is it possible to perform dynamic VLAN assignment based on the client MAC address using Cisco ISE (e.g., MAB), while keeping the SSID as WPA2-PSK?

If yes, what are the requirements and limitations (WLC/AP mode, ISE policy type, and security implications

Thanks

[Mark Elsen]

  - @bluesea2010    You will need :  WPA2 + 802.1x   instead :
                                             https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/217043-configure-dynamic-vlan-assignment-with-c.html  

  M.