On Aug 24, 2021, at 7:44 PM, Ray Burquest <rburquest@respiro.com.au> wrote:
Hi,
I am setting up a pilot for 802.1X with dynamic VLAN assignment based on the domain of the user attempting to connect to the switch. Users will be authenticated through different means depending on their domain ie
user@domainA.com = ntlm user@domainB.com = Secure LDAP unrecognised domain = default guest VLAN
I have got ntlm authentication and Secure LDAP authentication working independently but I would like some guidance as to how and where I configure the selection process and then then how to return the VLAN information
You return it in special RADIUS attributes. See the NAS documentation for which ones it needs. Typically it's: Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = "VLAN-NAME" Alan DeKok.