freeRadius dynamic vlan unifi AP

[Brian Candler]

On 11/02/2017 17:01, Jan-Christoph Fuchs wrote:
> Now I have changed to Unifi AP (Unifi Security Gateway Pro, Unifi Switch US-24 POE Unifi AP Pro) and the dynamic VLAN assignment will not work anymore. When I try to connect to the WPA2 Enterprise WLAN, credentials are accepted but I always been put to default VLAN.

Which exact model of AP?  Also, are you running with 3.7.x firmware and 
configured with the 5.x controller?

I had this working with the 1st gen Unifi Pro (the round one). But when 
I tried with the Unifi Pro AC (square one), it ignored the attributes. I 
reported the problem but didn't get any response:

https://community.ubnt.com/t5/UniFi-Wireless/UAP-AC-and-dynamic-VLAN-assignment/m-p/1703212

I suspect it's a chipset difference. Try ssh'ing into your AP, and doing

grep driver /etc/aaa*.cfg

I think I saw "broadcom" for the Pro AC, but "atheros" for the Pro.

I also now have a Unifi AC Lite (also "atheros") and that works fine:

17:32:05.943220 f8:e0:79:39:9e:6c > ff:ff:ff:ff:ff:ff, ethertype 802.1Q 
(0x8100), length 360: vlan 255, p 0, ethertype IPv4, 0.0.0.0.68 > 
255.255.255.255.67: BOOTP/DHCP, Request from f8:e0:79:39:9e:6c, length 314