cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
476
Views
0
Helpful
2
Replies

How to dynamicall assign a vlan to a user based on dot1x PEAP

wkw
Level 1
Level 1

Hi,

Just wondering if there's a method for assigning vlans depending on the dot1x authentication. Say for example, there are 2 groups of users, staff and student, who will be connecting to a wireless access point via dot1x (PEAP using Microsoft IAS Radius). I want to be able to, depending on whether the user connects as staff or student, to assign a vlan dynamically to that user, in order to control what he/she is authorised to do. Can anyone point me in the direction of how to go about doing this?

Much appreciated,

woon

2 Replies 2

jafrazie
Cisco Employee
Cisco Employee

You need to configure RADIUS attributes [64], [65], and [81] in IAS.

This might help:

<http://www.cisco.com/application/pdf/en/us/guest/netsol/ns75/c685/ccmigration_09186a0080259047.pdf>

Hi, have u done this dynamic vlan assignment on WLC before?

Review Cisco Networking for a $25 gift card