topic RE: One SSID - redirect to two different vlans. in ExtremeWireless (General)

One SSID - redirect to two different vlans.

lhuso — Fri, 05 Jun 2015 11:58:00 GMT

Hi all.
Is there anybody who knows how to configure One SSID on IdentiFi and redirect users to two different vlan's according to their Authenticatin method. One Vlan for EAP-TLS and one Vlan for EAP-PEAP?
We use Windows 2012R2 for Radius.

RE: One SSID - redirect to two different vlans.

hsachse — Fri, 05 Jun 2015 12:05:00 GMT

You have to create two nps rules with different auth methods enabled. Every rule includes radius attribute to redirect the user in the right vlan.

Here is a link to ms knowledge how you could append the radius attributes to steer the vlan:

https://technet.microsoft.com/en-gb/library/cc772124%28v=ws.10%29.aspx

RE: One SSID - redirect to two different vlans.

lhuso — Fri, 05 Jun 2015 12:08:00 GMT

Thanks.
I will check this out soon.

RE: One SSID - redirect to two different vlans.

Andre_Brits_Kan — Fri, 05 Jun 2015 14:13:00 GMT

You can also return a Filter ID applying different roles to the users.
The roles is defined on the controller.
The roles allow for "firewall like" rules to be applied to individual users on the same SSID, including Vlan, Rate limit, QOs ect...

RE: One SSID - redirect to two different vlans.

Doug — Fri, 05 Jun 2015 16:38:00 GMT

Check out: https://youtu.be/yJ1KAW6HHRA?list=PLvQMiI4QwvHQJc9iyfGAOB7qFdqNmqmyD
It may help point you in the right direction.