Re: Radius, 802.1x, and DHCP

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi Mike,

you can set up dynamic vlan assignment at your IAS based on the Active
Directory Group membership of the client.

for each vlan a specific policy must be created in which all AD groups
are in which should get this vlan.

do the following:

create a policy for your first vlan.
as a policy condition you specify "Windows group matches 'developers' "
'developers' is only an example. you must fill in the AD group your
client is in.

then you just configure the policy as normal.

now you must specify the dynamic assignment:
go to the "Edit Profile" button and then to "Advanced"

there you must add the following:
Tunnel-Pvt-Group-ID here you must enter the VLAN Name of the
vlan you want to assign
Tunnel-Type set to VLAN
Tunnel-Medium-Type set to 802

then you must only see that the authentication request of your client
gets to this policy. then the vlan assignment should be made.

Hope this helps.
Greetz Eric

.

Quantcast