WLC 9800 Dynamic VLan Assignment w/o ISE possible?

[lcaruso]

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/217043-configure-dynamic-vlan-assignment-with-c.html

Is it possible, has anyone actually got this working: use the dynamic vlan assignment feature with an non-ISE Radius server such as Windows Server? 

[Arshad Safrulla · Accepted solution]

It is perfectly possible, and can confirm this is working. I am not a Microsoft expert, but I follow the below guide as a baseline, and most of the times I have ended up deploying it successfully.

https://community.cambiumnetworks.com/t/how-to-configure-nps-and-active-directory-for-dynamic-radius-based-vlan-assignment/55086

[lcaruso]

Thank you!

[Rich R]

Yes, works with FreeRADIUS.  As long as you send the correct VSAs it will work.

If it isn't working use packet captures and debugs (on both sides) to work out what you're doing wrong.

Also you did not mention what version of code you're using (always include this please folks - it matters).

Some of the radius features we need are only supported from 17.5.1 and later.  You should be running at least 17.3.4.

[lcaruso]

Thanks for your comments.

We are in planning stages right now, moving from 5508s on 8.5.151 to whatever is recommended in 17.x on 9800s.