Hello Giuliano,
Two solutions, the first one is to do 802.1x with auto registration, the device
will be evaluated on the fly on each connection so getting the role and VLAN
that he belongs to.
Second solution keeping the captive portal, is to put a smaller registration
window or access
Are you referring to Radius COA? from what it seems, no... it looks
like you're talking about AD COA.. meaning, when the user changes AD
groups you'd want him to automatically change state?
Right now I think the only option would be some sort of script.. that
performs the group membership change
Please visit the following link
May be helpful for you, but Aruba devices used in the example
https://www.ospimenta.com/artigos/packetfence-part2/
https://www.ospimenta.com/artigos/packetfence-part3/
Regards
Thirunavukkarasu
--
Good morning, we are looking for the solution to this case.
Currently, to block students' internet browsing from personal devices, we
use a Captive Portal.
This technology is no longer applicable as complete segregation of the
device from any client, even the internal network, is a problem.
We