Page 1 of 1

802.1x - Device authentication

Posted: 09 Aug 2025 14:03
by toto24
Hi guys,

I was wondering if it's possible to dynamically assign VLANs using tunnel tags... without UNP.

We are currently working with UNP, but it is still difficult to deploy to all sites as we have a lot of them.
We would like to use an alternative method, such as an attribute in the NPS configuration parameters, to assign users to the correct VLAN.

Thank you for your support.

Re: 802.1x - Device authentication

Posted: 10 Aug 2025 13:00
by silvio
yes, you can use attribute tunnel-private-group-id 81 (=vlan like descriped in RFC 4675) instead of the filter-id. But within the release 8 switches you need an unp profile named like the vlan id.
f.e. if the vlan is 200
you need the following config:

Code: Select all

unp profile 200
unp profile 200 map vlan 200
best regards
Silvio