Group policy according to device type

[illbrain]

With my SSIDs, the devices must be brought into a VLAN according to the device type. For this purpose, a group policy guest was made that all devices with the exception of iPad and Windows devices are in the VLAN guest. But it doesn't work. All devices remain in the normal VLAN.

The authentication takes place via WPA2.

[PhilipDAth]

This feature does not work that reliably.  Sometimes it can take quite a bit of time to detect the device type and apply a policy.

[GIdenJoe · Accepted solution]

It's also not like in Radius CoA that your session immediately is flapped to assign the new VLAN.  I guess it's possible your devices will get the correct VLAN after reconnecting.

It might be a better idea to use something like WPA2 iPSK to enforce VLAN's on the devices since that IS instant.

[illbrain]

I also think this is the best way