Microsoft AD group check

Alan DeKok aland at
Sun Jan 12 18:59:53 CET 2020

> On Jan 12, 2020, at 12:38 PM, Olivier Mahieu <o_mahieu at> wrote:
> Does this also work with PEAP-MSCHAPv2?

  VLAN assignment has nothing to do with PAP / CHAP / PEAP / etc.  So yes, it works.

> Meaning in /sites-available/default, Auth-Type LDAP is disabled.

  You can't use that for EAP.

> Looking for a solution for dynamic VLAN assignment with PEAP/MSCHAPv2.

  It works.    Just try it.

  For PEAP, put the VLAN assignment into the "post-auth" section.  There's no reason to have it anywhere else.

  Alan DeKok.

More information about the Freeradius-Users mailing list