Hi everybody,
I have insatlled a RADIUS server and running MAC authentification with dynamic VLAN assignment on my Cisco Switch for the wired clients. This works pretty good. Username and password is the MAC addess of the cclient and the response ffrom RADIUS is the VLAN which is assigned to the client independent from the switch port. The Cisco switch is uplinked to the RB 3011 Router which provides the VLANs

Now I wanted to add a similar service for my WLAN clients. I have installed 4 cAP ACs, managed by CAPSMAN on RB3011. All cAPs are wired to the Cisco SG350x.

Does anybody know, if this is possible and how I can manage this on CAPSMAN? I wanted to use only one SSID for all VLANs. WLAN-Clients should have been registered in the same FreeRadius Database as the wired clients.

I found a workaround with WPA2EAp and passthrough, but this Service requires to enter password and username on the Client (e.g. Android) when WLAN connection is established. This is not very useful to enter MAC-Address for credentials

Regards,
Christian

Hi,
nobody an idea, if this works, or how to configure?
Spartacus

I thought there was a similar post recently but all I could find was this......
viewtopic.php?f=9&t=152066&p=749986&hil ... AN#p749986
viewtopic.php?f=2&t=152073&p=749784&hil ... AN#p749784
viewtopic.php?f=17&t=107081&p=744920&hi ... AN#p744920

Hi anav,
thanks for reply,
Now it works with Freeradius and mysql-DB. WLAN-Client authenticates with its MAC-Address and receives the desired VLAN. I use a single SSID for all VLANs with multiple cAPs, managed via CAPSMAN.
Spartacus

Hi,
thanks but I know this Tutorial very well!
Christian