RE: Dynamic VLANs based on AD group membership

2008-07-08 Thread Daniel Baumann
Follow-up question (sorry I'm new this): I'm currently authenticating users with FreeRadius against an AD database (PEAP-MS-CHAPv2). Would I still have to use the ldap module to get a user's AD group membership? Thanks, Daniel -Original Message- From: [EMAIL PROTECTED] g [mailto:[EMAIL P

Dynamic VLANs based on AD group membership

2008-07-08 Thread Daniel Baumann
Does anyone have a FreeRADIUS server handing out dynamic VLANs based on group membership in AD to a HP 2800 series switch that's configured for 802.1X? How do I configure FreeRADIUS to "read" the AD group membership attribute, and how do I then pass the matching VLAN-ID back to the switch? Danie