Controllerless Networks

last person joined: yesterday 

Aruba Instant Wi-Fi: Meet the controllerless Wi-Fi solution that's easy to set-up, is loaded with security and smarts, and won't break your budget.
Expand all | Collapse all

RADIUS based VLAN assignment - IAP-VPN with Centralised-L2

Jump to Best Answer
This thread has been viewed 9 times
  • 1.  RADIUS based VLAN assignment - IAP-VPN with Centralised-L2

    Posted Mar 04, 2021 09:39 PM
    Hi Airheads,

    Has anyone successfully used RADIUS based VLAN assignment with IAP-VPN tunnelled networks with Centralised-L2?

    Here is the proposed configuration:

    - VLANs configured on VPNCs managed by Aruba Central with DHCP relay
    - Aruba GRE configured on IAP cluster
    - Centralised-L2 DHCP scopes configured for each VLAN on IAP cluster
    - Roles with VLAN assignment rules configured for each Centralised-L2 scope
    - Single WLAN configured to use 'dummy' VLAN by default
    - ClearPass returns RADIUS attribute containing role assignment

    ------------------------------
    Chris Denham
    ------------------------------


  • 2.  RE: RADIUS based VLAN assignment - IAP-VPN with Centralised-L2

    Posted Mar 05, 2021 02:28 AM
    Hi Chris,

    I will be following with interest your topic as I am currently trying to implement the "Zero Trust" approach using FreeRADIUS on a Raspberry Pi. I have successfully set it up to authenticate into the devices for management purposes (with local authentication for backup).

    I am sorry I can't give any feedback on your enquiry, but I really hope more experienced members will come up with good advice.


  • 3.  RE: RADIUS based VLAN assignment - IAP-VPN with Centralised-L2

    Posted 13 days ago
    Hi skywave,

    from my point of view, your proposed configuration should work. I'm not sure if only role assignment will work. From my point of view, you also have to send the Aruba VLAN VSA as well. 

    BR
    Florian

    ------------------------------
    -------------------------------------------------------------------------------
    Florian Baaske
    -------------------------------------------------------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    -------------------------------------------------------------------------------
    Also visit the AirHeads Youtube Channel:
    https://www.youtube.com/channel/UCFJCnuXFGfEbwEzfcgU_ERQ
    -------------------------------------------------------------------------------
    Feel free to visit my personal Blog
    https://www.flomain.de
    ------------------------------



  • 4.  RE: RADIUS based VLAN assignment - IAP-VPN with Centralised-L2
    Best Answer

    Posted 13 days ago
    For posterity - this worked with Role and VLAN attributes returned. Haven't tried without the VLAN attributes (the roles on the VC have VLAN assignment rules)z

    ------------------------------
    Chris Denham
    ------------------------------