topic Re: Role based Access Control Policy: how to assign a dynamic VLAN based on role? in Wireless Questions and Best Practices

Role based Access Control Policy: how to assign a dynamic VLAN based on role?

pieter_schepens — Mon, 14 Sep 2020 14:35:46 GMT

We want to assign a dynamic VLAN based on the role of a user.

SSID settings: RBAC enabled, dynamic VLAN enabled, client fingerprinting enabled
Role settings: RBAC enabled, VLAN number filled in
The users get the right role assigned.

But still: no-one gets the VLAN of his role, everyone is stuck on the initial VLAN of the SSID.

Any ideas about what is prohibiting the assignment of the role VLAN?

Re: Role based Access Control Policy: how to assign a dynamic VLAN based on role?

santhosh_dk — Thu, 17 Sep 2020 22:14:29 GMT

Hi Pieter,

We would need more details about the controller type, software version, etc.

Please log a case from the link below. However, an active support contract is must.

I hope you have purchased support contract for your controller.

https://support.ruckuswireless.com/cases/new

Regards

Santhosh

Re: Role based Access Control Policy: how to assign a dynamic VLAN based on role?

pieter_schepens — Fri, 18 Sep 2020 09:16:18 GMT

Thanks, we'll log a case (we purchased support contract).

We're using a ZoneDirector 1200 with software 10.4.1.0 build 214.

Any advice on assigning dynamic VLAN's is welcome.

Re: Role based Access Control Policy: how to assign a dynamic VLAN based on role?

karthik — Sat, 19 Sep 2020 04:53:38 GMT

Hi Pieter,

This might be helpful to you. https://support.ruckuswireless.com/hth-zonedirector#zd-8021x-auth

Thanks
Karthik.

Re: Role based Access Control Policy: how to assign a dynamic VLAN based on role?

pieter_schepens — Thu, 24 Sep 2020 18:09:36 GMT

Meanwhile, we managed to use the role based access policy on a 802.1X WLAN: the users get the VLAN that's configured in their role on the ZoneDirector or in the radius attributes. It still doesn't work when we user captive portal/Web authentication based on a radius server or Active Directory, but when we use 802.1x EAP for authentication, it now works.

Re: Role based Access Control Policy: how to assign a dynamic VLAN based on role?

chandramohan — Tue, 22 Nov 2022 09:47:10 GMT

Hi Sir,

i want block you tube and factbook but application policy not working please suggest me