Live 802.1x authentication + dynamic VLAN

DADA
Comes here often

Live 802.1x authentication + dynamic VLAN

I am unable to drop into a dynamic VLAN for wired 802.1x authentication.I do not know if Meraki is incorrectly configured or Radius is incorrectly configured.Is there any clear documentation?

4 Replies 4
MartinLL
Building a reputation

You need to enable and configure VLAN profiles for dynamic vlan assignment.

 

VLAN Profiles

MLL
DADA
Comes here often

@MartinLL 
Where do I set it ?
Is it Meraki ? 
Is it radius ?

MartinLL
Building a reputation

You create VLAN profiles under network-wide > VLAN profiles. There you can add VLAN name to VLAN ID mapping.

 

After that you need to return the VLAN Name form your RADIUS server to the Network Access Device during client authentication. 

MLL
ww
Kind of a big deal
Kind of a big deal

MS switches can dynamically assign a VLAN to a client device by configuring the switch port to use the VLAN ID received via the RADIUS attribute Tunnel-Pvt-Group-ID

 

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/c...

 

https://documentation.meraki.com/MS/Access_Control/MS_Switch_Access_Policies_(802.1X)#Dynamic_VLAN_A...

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels