NWA90AX Pro Dynamic VLAN Assignment via Radius

kwagga · September 30

I have an NWA90AX Pro configured as a stand-alone AP. The management VLAN is tagged and set to 1. The Security profile for the SSID is set to WPA3 Enterprise and Radius. The SSID is set to VLAN 20.

When a client authenticates, I can see the Radius server sending VLAN 30, but the AP does not set the client on VLAN 30, instead VLAN 20 is set.

How do I configure the AP to honour the VLAN sent by the Radius server?

Zyxel_Melen · September 30

Hi @kwagga

Please reference this FAQ first to ensure your configuration is correct:
How to Configure 802.1x with Dynamic VLAN by Using External AAA server? — Zyxel Community
Is the VLAN setting of the path from AP to DHCP server configured correctly?
If the issue persist after above checking, please collect the diagnostic file and the radius server attribute with us. P.S. Please zip the diagnostic file before sending it to me.

https://community.zyxel.com/en/discussion/18869/how-to-collect-the-standalone-ap-diagnostic-info-by-gui

kwagga · September 30

Thank you very much for the reply. I've been able to resolve the issue. The problem was with the freeradius configuration. No specific configuration was needed on the NWA90AX Pro AP.
I do however, have questions about sending CoA-Requests (Radius Change of Authorization) to the AP's. They don't seem to accept them at all.

Zyxel_Melen · October 2

Hi @kwagga

Could you describe it in more detail?

I do however, have questions about sending CoA-Requests (Radius Change of Authorization) to the AP's. They don't seem to accept them at all.

It would be thankful if you can provide the packets. It can help us to check this question.

NWA90AX Pro Dynamic VLAN Assignment via Radius

All Replies

Categories

Wireless Help Center