topic Re: Assign VLAN through radius in Extreme Cloud

Assign VLAN through radius

cs2 — Tue, 13 Oct 2020 22:26:32 GMT

Hey !

We are running ExtremeCloud IQ - On prem 20.1.3.2-NGVA.

One SSID authenticats against a NPS radius.

Is it possile to assign the vlan for a user through a radius attribute? I mean not through user profiles? I know its possible to habe multiple user profile in extremecloudiq and assign those with radius attributes. What I’m looking for is a possibility to assign a new vlan to a user without touching the extremecloudiq or AP-configuration, simply by changing a AD attribute?

Thank you and best regards

Christopher

Re: Assign VLAN through radius

SamPirok — Wed, 14 Oct 2020 01:37:36 GMT

I don’t think that is possible. We should be able to assign a user profile via radius attribute, but we’d have to configure the user profile. No client will be able to connect and ignore the VLAN set in the user profile, and all clients have to use a user profile.

Re: Assign VLAN through radius

cs2 — Wed, 14 Oct 2020 20:58:45 GMT

Hey Sam, thank you for your response.

My problem is that we need to assign more than 64 vlans per ssid, is there any way to make that possible? The problem is the limit of 64 user profiles per SSID.

Thank you and best regards

Christopher

Re: Assign VLAN through radius

SamPirok — Wed, 14 Oct 2020 22:38:14 GMT

Thank you for clarifying. Unfortunately the 64 VLAN limit is a hard limit, I don’t know of a way to get around that without using more than one SSID. I’m sorry I couldn’t be more helpful here.

Re: Assign VLAN through radius

dparsons — Fri, 20 Nov 2020 02:00:59 GMT

Since you are stuck on the limit have you looked at client classification to do some of the assignment for you? May be a way for you to reduce the user profile count to under 64 and let things like MAC address or OS sort the user beyond the Radius attribute. I use this to first drop the user into a profile then depending on the client classification they may end up in one of several VLANs.