radius dynamic vlan assignment

[Chewbakka1]

Hi,

Quick question, when assigning vlans dynamically to wireless clients based on different radius profiles, are dotq1 tagging required on the access-points?

[marce1000]

                - Not if a controller is used and or the ap's are lightweight

 M.

[Tony Rosolek]

Depends on operating mode of the AP. In FlexConnect mode the AP is connected to a trunk port and required VLANs must be available and allowed on the access switch. In regular mode, the APs are connected to access ports (no dot1q) and traffic is tunneled via CAPWAP to the WLC and the VLANs need to be available there. 

[Chewbakka1]

Alright, The scenario i'm describing is a Flexconnect based solution. So the question is if you are required to enable dot1q taggin on the wireless side, towards the clients

[Rich R · Accepted solution]

If you use flex with local switching (traffic breaks out to the VLAN locally on the AP switchport) then YES.

If you use flex with central switching (traffic is tunnelled to the WLC) then NO, that's the same as local mode.

Note each WLAN can be configured differently.  You can have centrally and locally switched WLANs on the same AP - then you'll need tagging for the locally switched WLAN.  The centrally switched, tunnelled traffic will use the native (untagged) VLAN.