Controller-less WLANs

VLAN Derivation using operator "value-of"

Aruba Employee
Requirement:

Users to be assigned to a particular VLAN through radius attribute(Filter-ID) returned by radius server post successful authentication.

 



Solution:

"value-of" is an operator or rule that sets the User Role or VLAN to the value of the attribute returned by any radius server. The value of the attribute must already be configured on the IAP.  Before 4.2, only role derivation supports operator  “value-of”. Starting 4.2, VLAN derivation also supports operator/rule “value-of”(Is the VLAN).

 



Configuration:

 

Web UI Configuration:

 

 

 

CLI Configuration:

 

 

 

Attribute value on Radius server:

 

 

 



Verification

Post successful authentication, client is placed into VLAN 99 with the help of radius server attribute.

 

Version history
Revision #:
2 of 2
Last update:
‎01-13-2016 03:13 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.