Role based Access Control Policy: how to assign a dynamic VLAN based on role?

[pieter_schepens]

We want to assign a dynamic VLAN based on the role of a user.

SSID settings: RBAC enabled, dynamic VLAN enabled, client fingerprinting enabled
Role settings: RBAC enabled, VLAN number filled in
The users get the right role assigned.

But still: no-one gets the VLAN of his role, everyone is stuck on the initial VLAN of the SSID.

Any ideas about what is prohibiting the assignment of the role VLAN?

[pieter_schepens]

Meanwhile, we managed to use the role based access policy on a 802.1X WLAN: the users get the VLAN that's configured in their role on the ZoneDirector or in the radius attributes. It still doesn't work when we user captive portal/Web authentication based on a radius server or Active Directory, but when we use 802.1x EAP for authentication, it now works.