https://community.ruckuswireless.com/t5/ZoneDirector/Active-directory-and-VLAN-match/m-p/35995#M6431 Is it possible to change the VLAN of a user based on his/her AD group, using guest pass, captive portal or zero-it? I know that this can be done by authenticating users via 802.1x but we want to know if there's a way to do it using other types of authentication. Mon, 28 Apr 2014 04:05:18 GMT erick_muller_65 2014-04-28T04:05:18Z https://community.ruckuswireless.com/t5/ZoneDirector/Active-directory-and-VLAN-match/m-p/35995#M6431 Is it possible to change the VLAN of a user based on his/her AD group, using guest pass, captive portal or zero-it? I know that this can be done by authenticating users via 802.1x but we want to know if there's a way to do it using other types of authentication. Mon, 28 Apr 2014 04:05:18 GMT https://community.ruckuswireless.com/t5/ZoneDirector/Active-directory-and-VLAN-match/m-p/35995#M6431 erick_muller_65 2014-04-28T04:05:18Z https://community.ruckuswireless.com/t5/ZoneDirector/Active-directory-and-VLAN-match/m-p/35996#M6432 DVLAN works by passing attributes to a RADIUS and receiving a reply of a VLAN ID called a "Tunnel-Private-Group-ID" so 1X is required to achieve that. <BR /><BR /> And you can only use 1X with the "Standard usage" or "HotSpot 2.0" Type of WLAN you create and only if choosing WPA or WPA2 (not Mixed). <BR /><BR /> That's because a user needs to authenticate before it gets an IP, so that the proper IP is given to a user, and that can only be achieved if a user is verified at Layer 2. Guest portals and such verify users at Layer 3 when a user already has an IP. Mon, 28 Apr 2014 07:23:34 GMT https://community.ruckuswireless.com/t5/ZoneDirector/Active-directory-and-VLAN-match/m-p/35996#M6432 primoz_marinsek 2014-04-28T07:23:34Z