Page 1 of 1

MAC auth with dynamic VLAn assignment

Posted: Tue Oct 22, 2019 12:22 pm
by Spartacus
Hi everybody,
I have insatlled a RADIUS server and running MAC authentification with dynamic VLAN assignment on my Cisco Switch for the wired clients. This works pretty good. Username and password is the MAC addess of the cclient and the response ffrom RADIUS is the VLAN which is assigned to the client independent from the switch port. The Cisco switch is uplinked to the RB 3011 Router which provides the VLANs

Now I wanted to add a similar service for my WLAN clients. I have installed 4 cAP ACs, managed by CAPSMAN on RB3011. All cAPs are wired to the Cisco SG350x.

Does anybody know, if this is possible and how I can manage this on CAPSMAN? I wanted to use only one SSID for all VLANs. WLAN-Clients should have been registered in the same FreeRadius Database as the wired clients.

I found a workaround with WPA2EAp and passthrough, but this Service requires to enter password and username on the Client (e.g. Android) when WLAN connection is established. This is not very useful to enter MAC-Address for credentials

Regards,
Christian

Re: MAC auth with dynamic VLAn assignment

Posted: Wed Oct 23, 2019 11:10 pm
by Spartacus
Hi,
nobody an idea, if this works, or how to configure?
Spartacus

Re: MAC auth with dynamic VLAn assignment

Posted: Thu Oct 24, 2019 7:37 pm
by anav

Re: MAC auth with dynamic VLAn assignment

Posted: Wed Oct 30, 2019 10:26 pm
by Spartacus
Hi anav,
thanks for reply,
Now it works with Freeradius and mysql-DB. WLAN-Client authenticates with its MAC-Address and receives the desired VLAN. I use a single SSID for all VLANs with multiple cAPs, managed via CAPSMAN.
Spartacus

Re: MAC auth with dynamic VLAn assignment

Posted: Sun Nov 10, 2019 5:43 pm
by Spartacus
Hi,
thanks but I know this Tutorial very well! :-)
Christian