I am trying to dynamically assign VLANS based on FreeRADIUS user auth but it does not seem to be working. I am able to login and everything works fine except for the VLAN assignment; it always assigns the default VLAN. What I have done so far:
1. checked "Enable VLAN assignment" in FreeRADIUS > General
2. assign VLAN 11 in FreeRADIUS > Users > [user account]
3. enabled WPA/WPA2 Enterprise auth on the TP-Link EAP620 HD access point and linked it to the FreeRADIUS instance
Like I said, everything works fine, auth'ing against FreeRADIUS works, just no dynamic VLAN assignment. Am I missing any steps?
Is your switch enabled to do such things?
Damn you might be right. It has VLAN support and is an extremely recent model, but searching around it doesn't seem to be capable of it. Thanks, I thought regular VLAN support meant it supported this too.
If it doesn't have a configuration option for a RADIUS server and a shared secret for the RADIUS server, it most probably doesn't - nothing of this is "automatic".
It actually does have that, I am able to successfully point it to authenticate against my OPNSense FreeRadius using WPA Enterprise. It can also assign VLANs by SSID. Seems really close.