Forum

Yes this should be possible, as noted above return the VLAN id in radius attributes. Also note that you might have to have more attributes set. At least Tunnel-Type & Tunnel-Pvt-Group-ID should be set. Check with Aruba what else they need.

Are the wireless devices assigend to 1 person? Or will students and teachers (as example) both use the same laptops?

If thats a yes you would end up with dynamic vlan.

Some other things to think of:

- Do the machines need to be connected to the network when not logged in (You can also allow to connect on computer name, and put them in a special VLAN, think of software deployment etc)
- Windows XP does not support dynamic vlan in a windows domain environment without extra supplicants(think intel software, cisco wifi client etc.). When the computer would authenticate via radius and be put in a VLAN, then the user logs on and gets assigned a different VLAN, group policies and logon scripts will not be applied because of the machine renewing the IP address while booting.

Maybe too much info in your case, just wanted to let you know :)