Wireless Access

Reply
Occasional Contributor I

Single SSID with multiple VLANs

Can we input multiple VLANs per SSID, in Virtual AP under AP Configuration so that we can use only 1 single SSID for the whole company and transfer the user to the designated VLAN based on the User Role with Role VLAN ID?

Guru Elite

Re: Single SSID with mulitple VLANs

Yes, you can return a VLAN assignment in your RADIUS response or assign VLANs to user roles and then return the user role. 

You do not have to add all the VLANs to the virtual-ap. 

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I

Re: Single SSID with mulitple VLANs

Hi Cappalli,

 

Thanks for your response. The authentication is MAC address using internal database. You mean we have to create a Radius Server (NPS) for this one?

 

I have tried creating an account in the USER-ROLE with ROLE VLAN ID = 10 and bind it to the role in the internal database. But the user still getting the VLAN 20 which is indicated on the Virtual-AP once it connects.

 

 

 

 

Guru Elite

Re: Single SSID with mulitple VLANs

Yes, you could use the internal database but it is not very flexible. 

Are you clearing the user out of the user-table each time you test? 

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: