Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

POst auth VLAN change

This thread has been viewed 1 times

  • 1.  POst auth VLAN change

    Posted Sep 01, 2014 10:16 AM

    I have a requirement to change the VLAN a client device is put on after PSK authentication. The SSID is shared with other devices that need to remain on the VLAN associated with the VAP. Has anyone implemented this based on perhaps a MAC address - the client are single manufacturer printers which should have only one or a small number of OUIs. Also the devices have statically assigned IP addresses.



  • 2.  RE: POst auth VLAN change

    EMPLOYEE
    Posted Sep 01, 2014 10:18 AM
    You can do this with ClearPass or UDRs but the problem is that some devices don’t like to re-DHCP after a VLAN change.


  • 3.  RE: POst auth VLAN change

    Posted Sep 01, 2014 10:31 AM

    Trouble is they are static IPs so theres no DHCP. There is a clearpass at the customer but these devices are currently using a PSK for authentication. Can a UDR be used based on the OUI - I know you can do this with roles but I wasn't sure about VLANs.



  • 4.  RE: POst auth VLAN change
    Best Answer

    EMPLOYEE
    Posted Sep 01, 2014 10:42 AM

    You can do VLAN or user role.

     

    udr-vlan.PNG



  • 5.  RE: POst auth VLAN change

    Posted Sep 05, 2014 09:37 AM

    Made the change and it works a treat, thanks.