Tunnel-Private-Group-ID

vanith — Tue, 06 Jan 2026 20:07:32 GMT

I was inquiring is there a character limit to the hosted Cloudpath server for the amount of VLAN's that you can add.

We are implementing ZTA (Zero Trust Architecture) for our network, which means we need to implement micro-segmentation.

We have 64 characters in the field and we're looking to expand out to include more VLAN's for isolating vendor equipment that require Internet, DNS, and DHCP for functionality with no access to internal server infrastructure

In the documentation, it doesn't specify what the character limit is for the field

I have seen Microsoft, Cisco, and other documents that suggest 250 to 255 character limit to the field is typically what they deploy

I found my answer in another documentation:

Note: A maximum of 32 dynamic VLANs can be sent from RADIUS with a Tunnel-Private-Group-ID in the format U: multiple T: where U and T both represent either a VLAN-name or a VLAN-ID.
docs.commscope.com/bundle/fastiron-10020-securityguide/page/GUID-BAE30D0D-89DF-4447-916C-79D7D86D192E.html

I don't know if this is different than version 08095, but we're migrating to 10.X in the next year

Re: Tunnel-Private-Group-ID

Debadrita — Fri, 17 Apr 2026 15:02:49 GMT

Hello Vanith,

Cloudpath does not enforce a strict character limit on the Tunnel-Private-Group-ID field; it simply generates and forwards standard RADIUS attributes to the network infrastructure.

Thank you,

Debadrita paul.

topic Tunnel-Private-Group-ID in Cloudpath Enrollment System (ES)

Tunnel-Private-Group-ID

Re: Tunnel-Private-Group-ID