802.1x - Device authentication

[toto24]

Hi guys,

I was wondering if it's possible to dynamically assign VLANs using tunnel tags... without UNP.

We are currently working with UNP, but it is still difficult to deploy to all sites as we have a lot of them.
We would like to use an alternative method, such as an attribute in the NPS configuration parameters, to assign users to the correct VLAN.

Thank you for your support.

[silvio]

yes, you can use attribute tunnel-private-group-id 81 (=vlan like descriped in RFC 4675) instead of the filter-id. But within the release 8 switches you need an unp profile named like the vlan id.
f.e. if the vlan is 200
you need the following config:

Code: Select all

unp profile 200
unp profile 200 map vlan 200

best regards
Silvio