04-01-2015 09:54 PM
i have done VLAN mapping to one SSID, so same ssid mapped to 2 different vlans,,,and i put them in different AP groups. this ssid is for guests in 2 diffrent floors.with 2 diffrent captive portals, which means the client will get an IP before he authenticates ( no ACS or clearpass), its an open authentication, The question is how can the controller tell the differnce between the users and map them to the right vlan?
thanks for clearing the issue.
04-01-2015 10:14 PM
04-01-2015 11:44 PM
VLAN can be mapped to a user through a role also. hence create different authenticated roles for each location and map different VLAN to those roles. here is the work around,
For your ref :
Assigning Initial role for triggering CP-Profile
Assigning CP-Profile to the Guest logon role:
Mapping Guest authenticated role to CP-Profile :
Mapping VLAN to Guest Authenticated role :
Please feel free for any further help on this.
In the above config, AP-Group of each location will have different AAA profiles with different CP-profile ,Default guest role with different VLAN, hence you can meet you can requirement.
[Is my post helped you ? Give Kudos :) ]