Thank you Jason, but I can't make it work. Can you also share pre-authenticated role?
I setup every thing as shown here except I used same role for pre-auth role.
Here is how topology filter page looks:
I plug my laptop to the switch with vlan 60. I can't get ip address. I configured static ip 10.100.60.100 on laptop with gateway 10.100.60.2 but I can't even ping 10.100.60.2. I can ping 10.100.60.2 from different subnets so routing seems to work. Even wierd I can see my laptop and switch port mac addresses on clients reports:
Also there is something really wrong here. When I make changes on 3rd party vns setting and save it, all the other vns clients lose connection. When they scan wifi all ssid show up and disappear continuously and new users can't connect. There is no log about any error on EWC. Only rebooting EWC solves this situation.
So I fear to make any furter changes as it affects all users.