Hi,
On old WISM2 controllers I was able to provide vlan assignment values through radius replies during mac filtering verification step. Then upon successful user authentication, controllers were merging attributes from both queries and were using results for final vlan assignment. Now, on C9800, it seems that after the mac filtering step (controllers still retreive correct vlan values), attributes are reset before user authentication (vlan-id attribute with the right value is still sent in the radius request), so if radius Accept message does not contain Tunnel-Private-Group-Id attribute, user device is attached to the predefnied vlan from tag/policy configuratinos. Is there a command to change this behavior, or is this a bug ? There is a workaround that could be set on radius servers (on freeradius servers for example), but if there is a better solution... Thanks.
