If you select dynamic VLAN assignment, you would need to create at least one VLAN Assignment Rule. If you return the VLAN through the RADIUS Aruba-User-VLAN attribute, you can leave this setting to whatever as even with Default (untagged on the AP) or Static (tagged from the AP) the Aruba-User-VLAN attribute will override that configuration. If you need another attribute to set the VLAN, you can do that with a VLAN Assignment Rule (is the VLAN).
Similar to your Role-based, if you don't have any Role assignments, it bumps back to Unrestricted. You can set Network Based with a basic/locked policy then use the Aruba-User-Role VSA to override that. Or use assignment rules (and I think Aruba-User-Role still overrides that).
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Jun 16, 2023 05:23 AM
From: fjulianom
Subject: Unable to configure dynamic VLAN assignment on IAP
Hi guys,
I had an SSID using PSK, and now I want to use it with WPA2 Enterprise. I was able to change the Key Management from WPA2 Personal to WPA2 Enterprise, and set the authentication servers. But when I want to change Client VLAN Assignment from Default to Dynamic and click on Apply, the screen returns to Default:
After clicking on Apply:
Also I noticed when I want to change the Access from Unrestricted to Role-based I have the same issue, when I click on Apply, the screens returns to Unrestricted:
Why I have these problems? I have tried creating a new SSID and I still have the same two problems. Please your help.
------------------------------
Regards,
Julian
------------------------------