RADIUS dynamic VLAN based on Windows2012 NPS

Source: Internet
Author: User
Tags cisco switch

Previously introduced the RADIUS wireless authentication scheme based on Windows2012 NPS, article: http://blog.51cto.com/hubuxcg/1636719?cid=702921#702921 today, based on the Windows NPS RADIUS Configuration Dynamic vlan!
For the initial configuration section of NPS, refer to the previous article, which is only described in connection with VLAN configuration.
1. In the NPS policy, add the connection policy, select Secure Wired (Ethernet) connection

2. Add the network device name, IP address, and authentication password that you need to call raids, and then configure the network settings later.

3. Select the authentication method: PEAP

4. Select an existing certificate

5, add the user, here need to change the user Configuration VLAN, so we select the configured group: VLAN100

6, configure the transport control, open the configuration:

7, Tunnel-type:vlan

8, tunnel-medium-type:802

9. tunnel-pvt-group-id:100 (VLAN ID on switch)

10, the above three configuration completion point completed.

11. After the configuration is complete, the results are as follows:

12, repeat the above operation, add the user group that need to configure \vlan corresponding configuration:

13, confirm the exit, to this Windows side of the RADIUS configuration is complete, the following is the authentication configuration of the Cisco switch: Enable radius\ configuration on the switch Raidus server information:
AAA New-model
AAA Authentication dot1x Default Group radius
AAA Authorization Network Default group RADIUS
Radius-server Host 192.168.1.2 Key 123456
Radius-server VSA Send Authentication

14. Port configuration on the switch vlan\ enable PAE authentication
Switchport mode access
Authentication Port-control Auto
DOT1X PAE Authenticator
Spanning-tree Portfast

15, Configuration Complete!

RADIUS dynamic VLAN based on Windows2012 NPS

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.