Network Management

 View Only
last person joined: yesterday 

Keep an informative eye on your network with HPE Aruba Networking network management solutions
Back to discussions
Expand all | Collapse all

iMC UAM providing separate VLAN for each access device, regardless where user logs on

This thread has been viewed 0 times

  • 1.  iMC UAM providing separate VLAN for each access device, regardless where user logs on

    Posted Nov 20, 2013 06:23 AM

    Hello 

     

    I am trying to figure out how to make UAM issue separate VLAN regarding to which wired/wireless access device user authenticates.

    Meaning - there are several floors on the building. Each floor has it's own data VLAN. 

    User could authenticate in any of those devices and they should receive appropriate VLAN (floor VLAN so to speak) depending on which floor they are. 

     

    Is that even possible with current version of iMC ? v7.0?


    #dot1x
    #VLAN
    #uam
    #imc


  • 2.  RE: iMC UAM providing separate VLAN for each access device, regardless where user logs on

    Posted Nov 20, 2013 08:38 AM

    Hi Marcis,

     

    There are 2 options here:

    * UAM based with Access scenario's in the Access Service:

    - define access device groups (1 group with all switches of each floor)

    - define Access policy per vlan to be used

    - open Access service and define different scenario's : per device group select different access policy

    * Switch based (would seem easier to me):

    - in UAM define a vlan name instead of vlan ID (e.g. DATA or VOICE )

    - on the switches define the name on the correct vlan

     e.g.

    # floor 1

    vlan 10

     name DATA

    vlan 11

     name VOICE

    # floor 2

    vlan 20

     name DATA

    vlan 21

     name VOICE

     

    Hope this helps,

     

    Best regards,Peter



  • 3.  RE: iMC UAM providing separate VLAN for each access device, regardless where user logs on

    Posted Nov 21, 2013 01:11 AM

    Thanks Peter!

     

    Excatly what doctor ordered! :)

    I had thinking along those lines, but you helped me refine it. :)

     

    THANKS!