Dynamic Vlan Allocation based on LDAP Attribute Value

[Michael Schwartzkopff]

Am Freitag, 13. Februar 2009 07:17:17 schrieb Paul Dealy:
> I have a working radius server (ver 1.1.3). which I am using for
> 802.1x authentication of wired switch ports.  I would like to
> dynamically assign users vlans.  I have cisco gear and have achieved
> basic vlan allocation by configuring a Default entry in the users
> file.   So the vlan allocation part works ok.
>
> What I want to be able to do is allocate the vlan by matching the
> value of an LDAP attribute.  Not by group membership, but the actual
> value of a users attribute.  Is this possible?
>
> Cheers,
> Dealy

Yes. Just assign these attributes to the user object in LDAP.


-- 
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany
Tel: +49 - 89 - 45 69 11 0
Fax: +49 - 89 - 45 69 11 21
mob: +49 - 174 - 343 28 75

mail: misch at multinet.de
web: www.multinet.de

Sitz der Gesellschaft: 85630 Grasbrunn
Registergericht: Amtsgericht München HRB 114375
Geschäftsführer: Günter Jurgeneit, Hubert Martens

---

PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
Skype: misch42