Is there a way to set a server rule under an Authentication Server Group so that a user gets assigned to a VLAN Pool as opposed to just specific VLAN?
There is not a way at this time.
You may decide that you want to assign a group of users a different role, but just allow them to consume the same pool under the VAP.
Okay. I thought there might have been an alternative method to acheive what I wanted by this comment.
"You may decide that you want to assign a group of users a different role, but just allow them to consume the same pool under the VAP."
The question is.... What are you trying to accomplish? What is your situation?
I would like to assign students who authenticate via 802.1x to be assigned to a VLAN Pool on the same SSID as everyone else. As opposed to just a single VLAN.
Okay, so you might want to turn it around, then:
Assign a pool of VLANs to the Virtual AP. If a student authenticates via 802.1x just allow them on the radius server side or assign a role that does NOT have a VLAN assigned. For others, you can assign them to a role that has a single VLAN tied to the role:
Your Virtual AP has vlans 10,20,30.
When your students authenticate, they will end up in one of those VLANs.
Say a faculty member authenticates, you can respond with the radius server with a single VLAN that you want faculty in, or a role that has a single VLAN tied to it.
Does that make sense?
Absolutely. I definitely follow your logic.
Until they come out with the ability to do the role based stuff then I wouldn't be able to assign staff to a pool using the same SSID.
Thanks for all your input!
If it will make you feel better, we have people using /22 networks with "drop broadcast and multicast" enabled on the VAP/VLAN and they have not had performance issues to speak of. In other words, a single larger VLAN would be a supported move.
That does.. There is a chance we could go 1-1 with iPads, about 900 extra devices....and I'd like to break it up as much as possible.
I'd just like to be as ready as possible for a large deployment.
Thanks to you and everyone else being patient with me. I'm learning a lot from you all!
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.