Ruckus Wireless ZoneDirector 1100 User Manual page 206

Deploying ZoneDirector WLANs in a VLAN Environment
How Dynamic VLAN Works
2 The AP requires the user to authenticate with the RADIUS server via
ZoneDirector.
3 When the user completes the authentication process, ZoneDirector sends the
join approval for the user to the AP, along with the VLAN ID that has been
assigned to the user on the RADIUS server.
4 User joins the AP and is segmented to the VLAN ID that has been assigned to
him.
Required RADIUS Attributes
For dynamic VLAN to work, you must configure the following RADIUS attributes for
each user:
• Tunnel-Type: Set this attribute to VLAN.
• Tunnel-Medium-Type: Set this attribute to IEEE-802.
• Tunnel-Private-Group-ID: Set this attribute to the VLAN ID to which you want to
segment this user.
Depending on your RADIUS setup, you may also need to include the user name or
the MAC address of the wireless device that the user will be using to associate with
the AP. Table 19
Table 19. RADIUS user attributes related to dynamic VLAN
Attribute
Tunnel-Type
Tunnel-Medium-Type
Tunnel-Private-Group-Id
Here is an example of the required attributes for three users as defined on Free
RADIUS:
0018ded90ef3
User-Name = user1,
Tunnel-Type = VLAN,
Tunnel-Medium-Type = IEEE-802,
Tunnel-Private-Group-ID = 0014
00242b752ec4
206
lists the RADIUS user attributes related to dynamic VLAN.
Type ID
64
65
81
Expected Value
(Numerical)
VLAN (13)
802 (6)
VLAN ID
Ruckus Wireless, Inc.