ArubaOS and Controllers

Reply
Occasional Contributor II

AAA for VLAN assign in single SSID

I need an advice, I would like to achieve a setup where, user see only 1 SSID, but upon authenticated with AD, they will be assign to respective VLAN where they belong too. So we no need to broadcast so many SSID for each VLAN. Can it be done?
Aruba Employee

Re: AAA for VLAN assign in single SSID

This is doable. By having the server return an attribute value (such, as 'Class' attribute - with a string value of 'xyz') upon authenticating the user against the AD,
you can then, have Aruba controller set-vlan for the user based on the attribute value - using server derivative rules.

I would recommend you read through the link below,
http://support.arubanetworks.com/Default.aspx?tabid=111&loc=https://kb.arubanetworks.com/cgi-bin/arubanetworks.cfg/php/enduser/std_alp.php?p_sid=2JooLwkk

The same concept can be applied for setting a vlan as well.
Barath Srinivasan
Customer Engineering Architect
Customer Advocacy | Aruba Networks Inc.
-----------------------------------------------------------------------------------------------------------
Did something you read in the Community solve a problem for you? If so, click "Accept as Solution", in the bottom right hand corner of the post.
-----------------------------------------------------------------------------------------------------------
Aruba Employee

Re: AAA for VLAN assign in single SSID

If the link does not work for you, go to-
https://kb.arubanetworks.com

and look for answerID 920
Barath Srinivasan
Customer Engineering Architect
Customer Advocacy | Aruba Networks Inc.
-----------------------------------------------------------------------------------------------------------
Did something you read in the Community solve a problem for you? If so, click "Accept as Solution", in the bottom right hand corner of the post.
-----------------------------------------------------------------------------------------------------------
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: