We have configured an SSID with enterprise security with Microsoft NPS radius and override VLAN TAG. It's our radius server which, depending on the PC group, assigns the Tunnel-PVT-GROUP-ID.
Example: my SSID is called WIFI_TEST
- if my pc belongs to the AD WIFI-SERVICE1 group, the radius gives it VLAN 75
- if my pc belongs to the AD WIFI-SERVICE2 group, the radius gives it VLAN 76
- if my pc belongs to the AD WIFI-SERVICE3 group, the radius gives it VLAN 77
It works fine on a single site.
We have other remote sites in MPLS. How can we duplicate this configuration on our other sites knowing that we cannot route the same VLAN IDs? Is it possible to mix in the same configuration of SSID Radius Override and VLAN tagging for remote sites? Can we put several Tunnel-PVT-GROUP-ID on the radius server. How did you do ?