Cloud Managed Networks

Hi all,

I am trying to make my SSID push smartdevices to a seperate vlan with wifi.

Ik found the Dynamic VLAN options, but I cant find the option to select device type as a value.

This 1 one of the devices

As you can see, central puts it in "category" "smartdevice"

But i an not sure what the right option is under the Dynamic VLAN assignment to use this value as a reference

I hope anyone here has the answer ;)

Kind regards,

Wouter

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

Hi all,

I am trying to make my SSID push smartdevices to a seperate vlan with wifi.

Ik found the Dynamic VLAN options, but I cant find the option to select device type as a value.

This 1 one of the devices

As you can see, central puts it in "category" "smartdevice"

But i an not sure what the right option is under the Dynamic VLAN assignment to use this value as a reference

I hope anyone here has the answer ;)

Kind regards,

Wouter

Hi Herman,

I created a new Role "xxx_IOT" and allowed all traffic and assigned VLAN20.

I then did as u suggested and created the policy.

The WLAN itself uses PSK to authenticate, but i only see CloudAuth under Enterprise.

Am i missng something?

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

Hi all,

I am trying to make my SSID push smartdevices to a seperate vlan with wifi.

Ik found the Dynamic VLAN options, but I cant find the option to select device type as a value.

This 1 one of the devices

As you can see, central puts it in "category" "smartdevice"

But i an not sure what the right option is under the Dynamic VLAN assignment to use this value as a reference

I hope anyone here has the answer ;)

Kind regards,

Wouter

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

Hi all,

I am trying to make my SSID push smartdevices to a seperate vlan with wifi.

Ik found the Dynamic VLAN options, but I cant find the option to select device type as a value.

This 1 one of the devices

As you can see, central puts it in "category" "smartdevice"

But i an not sure what the right option is under the Dynamic VLAN assignment to use this value as a reference

I hope anyone here has the answer ;)

Kind regards,

Wouter

Is this also possible for switches to assing VLAN based on DeviceType?

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

Hi all,

I am trying to make my SSID push smartdevices to a seperate vlan with wifi.

Ik found the Dynamic VLAN options, but I cant find the option to select device type as a value.

This 1 one of the devices

As you can see, central puts it in "category" "smartdevice"

But i an not sure what the right option is under the Dynamic VLAN assignment to use this value as a reference

I hope anyone here has the answer ;)

Kind regards,

Wouter

yes you can also enable MAC auth and choose CloudAuth for it.

Is this also possible for switches to assing VLAN based on DeviceType?

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

Hi all,

I am trying to make my SSID push smartdevices to a seperate vlan with wifi.

Ik found the Dynamic VLAN options, but I cant find the option to select device type as a value.

This 1 one of the devices

As you can see, central puts it in "category" "smartdevice"

But i an not sure what the right option is under the Dynamic VLAN assignment to use this value as a reference

I hope anyone here has the answer ;)

Kind regards,

Wouter