We do the same thing but are currently using Aruba hardware. In our radius remote access policies, we assign the 'Class' attribute and match off of that on the controllers. Previously we had a 3com infrastructure and did this be seting 'Tunnel-Type' to 'VLAN' and 'Tunnel-Pvt-Group-ID' to the vlan number we wanted the user on.

I am unfamiliar with any of Meru's stuff but perhaps these are some starting points for you too look into.

Sam Stelfox
Network Administrator
Vermont Technical College

Barber, Matt wrote:

Hi James,

We use a single SSID for all normal users, but separate them by VLAN based on their Active Directory group. Faculty/Staff get put into one, students into another. That way we can make different firewall or bandwidth rules based on their subnet.

We use Meru wireless and Windows IAS server in the backend for RADIUS, but I am almost certain all of the vendors can do this.

Matt

*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] *On Behalf Of *Jamie Savage
*Sent:* Friday, September 18, 2009 3:33 PM
*To:* [email protected]
*Subject:* [WIRELESS-LAN] separating 'types' of users

Hi,
We're entertaining the idea of providing separate wireless services to our academic and admin communities. Currently, we have a single SSID that we broadcast campus-wide that everyone uses. We could simply provide separate SSIDs or perhaps provide separate SSIDs on separate channels (ie...RF separation of services as well). I presume there are other methods in use out there?? I'd be interested in hearing what others are doing in this regard.

..........thanks in advance..............J

James Savage York University Senior Communications Tech. 108 Steacie Building
[email protected]                            4700 Keele Street
ph: 416-736-2100 ext. 22605            Toronto, Ontario
fax: 416-736-5830 M3J 1P3, CANADA ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.



**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to