How to configure WPA2-Enterprise (802.1X) with Dynamic VLAN by Nebula Cloud Authentication Server






When the station wants to connect with the AP, you can use Nebula Cloud Authentication Server (NCAS) to provide access control to your network. In this example, assuming there are two stations in different groups and they can connect to the same SSID for accessing the Internet, but get IPs in different subnets because of the dynamic VLAN settings. Nebula provides user to assign different VLAN for the users created in NCAS.
Using Dynamic VLAN let different groups get different subnet’s IPs, so the network security is higher. Moreover, more application can apply for the network such as one group have the higher rate/ priority than others, etc.

Configuration:
1. Go to Access point > Configure > SSID
setting, and configure the SSID name. Click Enabled, and Save.
2. Go to Access point > Configure > SSID advanced setting. Select WPA2-Enterprise with Nebula Cloud authentication in Network access, and click Save.
3. Site-wide > Configure > Cloud authentication, select User and click +Add button
4. Input VLAN assignment (10 and 20 for example) and user information as the image below, and click Create User.
Note that: VLAN assignment feature is Nebula Pro pack feature and require 6.00 or newer AP firmware version and incorrect VLAN setting will cause connection issue.
Verification:
Access point > Monitor > Clients
Click this link to start: https://bit.ly/3R2Wx52
Judy
Categories
- All Categories
- 183 Beta Program
- 1.7K Nebula
- 89 Nebula Ideas
- 63 Nebula Status and Incidents
- 4.7K Security
- 236 Security Ideas
- 1.1K Switch
- 51 Switch Ideas
- 914 WirelessLAN
- 27 WLAN Ideas
- 5.4K Consumer Product
- 174 Service & License
- 295 News and Release
- 65 Security Advisories
- 14 Education Center
- 983 FAQ
- 426 Nebula FAQ
- 255 Security FAQ
- 100 Switch FAQ
- 115 WirelessLAN FAQ
- 21 Consumer Product FAQ
- 66 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 68 About Community
- 52 Security Highlight