WInG RFS 7000 VSA Attributes

  • 0
  • 1
  • Question
  • Updated 8 months ago
  • Answered
Can anyone share the VSA attributes for RFS7000 Controller

As we are planning for dynamic vlan assignment for wireless client based on their group with the help of AD & NPS Server.

We have similar done this similar with aruba controller and working well

Sharing the setup of aruba VSA for reference purpose :

You can achieve this by using the Aruba VSAs above.   For example, on NPS create a newtork policy for the "IT" group and assign VLAN XYZ.

Policy Name - Wireless-IT-VLAN-Assignment

Type of Network Access Server - Unspecified

Conditions - add whatever you typically add; but make sure you have Windows Group matches IT

Acesss Granted

EAP Type - add whatever authentication types you use

Constraints - NONE

RADIUS Attributes

  • Click Vendor Specific; click Add
  • Choose Vendor Specific from the Vendor choice; click Add
  • Click to add attribute information
  • Select Vendor Code = 14823 and Yes it conforms, click Configure Attributes
  • Choose 2 as your assigned attribute number (for Aruba-User-VLAN in the above table)
  • Attribute format = integer (decimal for IAS/NPS)
  • Attribute value = XYZ (VLAN number)
  • Click OK to close out


On your Server Group that has the NPS servers defined, add a server derived rule that will look for this attribute from NPS and then apply the VLAN.   This will set the VLAN to whatever value is sent by NPS for Aruba-User-VLAN (or to NPS, Vendor 14823, attribvute 2).

Photo of Bhaseeth Ali A

Bhaseeth Ali A

  • 110 Points 100 badge 2x thumb

Posted 8 months ago

  • 0
  • 1
Photo of Timo


  • 3,210 Points 3k badge 2x thumb

Tunnel-Medium-Type: 802
Tunnel-Pvt-Group-ID: <VLAN-ID>
Tunnel-Type: VLAN

That's all RADIUS standard attributes.