Dynamic Vlan failling with NPS ??

[simon_young_604]

I am trying to configure a dynamic vlan solution where a users is dropped into a specific vlan dependant on their AD group membership validated by a Microsoft NPS server.

I have the NPS server running and configured the appropiate settings
Under Radius Attributes:
Framed- Protocol - PPP
Service-Type - Framed
Tunnel-Medium-Type - 802
Tunne-PVT-group-ID 501 - (this is the vlan I want to drop into)
Tunnel-Type - Virtual LANs

I can connect to the wireless and get authenticated however I drop into the VLAN that the AP is connected into.

If I enable Dynamic Vlan - I still connect to the wireless but get no network.

I am thinking it is something to do with the way we are connecting the AP's to the switches?

If I connect to an AP that is in the VLAN I want - everything works.

So my thinking is that there has to be a bit more work on switch configuration for the AP's to support this?

I cannot find any info about this on the ruckus knowledgebase anywhere?

Does this sound familiar to anyone

For reference we are using Juniper EX4200 switches.

Thanks

[tyler_frantz]

I have a question about implementing a dynamic vlan assignment setup such as Simon is describing above.

Is it possible to setup this type of vlan assignment and NPS authentication per user on a wireless network using a ZF7025 AP without the need for a ZoneDirector.

[keith_redfield]

This is a great conversation that's separate from the main topic, so I created a new topic to continue the discussion. Please reference the new topic here: Dynamic VLANs with Standalone APs