ExtremeControl & XIQ Controller - Policy Role - "Bridged@AP" VLAN

[Guilhem_Lejeune]

Hi everyone,

I want to take advantage of pushing Policy Role (and only this) to XIQ Controller upon authentication.
My idea is :

• Role with "Contain to VLAN X".
• Accept Policy with my role only (no VLAN)
• XIQ Controller as RADIUS client with "Extreme IdentiFi Wireless" in "RADIUS Attributes to Send".

I have noticed that, after Policy Enforce, VLAN (configured in XIQ SE/ExtremeControl in "Policy > Roles" menu) are pushed to XIQ Controller in "Bridged@AC" mode.

As expected, there was issue when testing 😄

Is there a way to have these VLAN being pushed with "Bridged@AP" mode ?

Kind regards,

[Doug]

Are you using Filter-ID=<role name> to push the role (which should have a topology mapping) 

[Guilhem_Lejeune]

Hi,

Yes. The preview shows me this :

Filter-Id=Enterasys:version=1:policy=<role_name>

Kind regards,

[Doug]

So the user gets the correct role assigned (not the default one), but is not in the correct topology?  (check the end system report in XIQ-SE/Control (NAC)) 

[Guilhem_Lejeune]

I will check again tomorrow and keep you in touch.

Thanks,