Cloudpath/Radius server with vlan pooling, can it be done?

[david_henderson]

We will be on-boarding staff, student and guest personal devices using Cloudpath. We currently have over 2,500 student personal devices and I would rather not place them all in a single vlan which would create a lot of broadcast traffic.

I want to create a vlan pool consisting of eight /23 vlans. A /23 vlan yields about 500 IP addresses with eight of them giving me 4,000 addresses I can hand out to student personal devices. A /23 is nice and small to cut down on broadcast traffic and keep performance optimal. I then want students to authenticate via Cloudpath and be placed in this vlan pool.

This can already be done with Aruba
http://goo.gl/PvX5OU

Can I do this with Cloudpath and Ruckus?

[seanmuir]

You could use Loopback interfaces:

interface GigabitEthernet0/0.101
 description student WiFi
 encapsulation dot1Q 101
 ip unnumbered Loopback10
 ip helper-address 10.10.10.1
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip policy route-map cloudpath
 no cdp enable

and repeat for as many VLANs as you are using

[david_henderson]

What you have described is a bit out of my area of expertise. I am bit foggy on the interaction between a radius server and the Ruckus controller works but this is my best guess. I believe a radius server can easily return an attribute that indicates that this is a student personal device trying to authenticate to the network. What I am not sure is possible is the Ruckus controller taking that attribute and placing that device/student in a vlan pool as defined in the controller. The attribute can be used to place the student/device in a single vlan but I want the student/device placed in a vlan pool.

Exactly how would using a loopback interface help in this regard?

[john_westlund]

I know this is old but I can't find an answer.  Is it possible to send back a DHCP pool from cloudpath?

[nathan_bailey_2]

I believe if you have dhcp pooling configured on the Vsz and you return a null value from the radius server for the vlan, the controller will place users in different VLANs as expected.  You may run into issue when trying to configure multiple pools on a per role basis.