Interface groups are one of those very unassuming features that 'just works'. The WLC treats all interfaces (regular interfaces or groups) the same and all you need to modify on your aaa return attribute is the name of the group instead of the name of the VLAN. In fact, if you're currently returning an interface name 'student' (for example), you could actually delete that interface on your WLC, rebuild it with something more appropriate (VLAN42 or whatnot), and build out several new interfaces (VLAN43, 44, 45, etc) then remake your previously named 'student' interface as the interface group name. It's quite flexible but I absolutely echo the sentiments that it's easier to add a group than it is to delete. Not super-cumbersome, but certainly something to keep in mind.
Go Blue! -Sam On Thu, Aug 25, 2016 at 5:50 AM, James Helzerman <[email protected]> wrote: > Hi. For those using interface groups on Cisco WLC, could you share any > experiences good or bad that you have had? We are exploring the use of aaa > override and return the interface group name rather than vlan. > > Thanks > > Jimmy > > James Helzerman > Wireless Network Engineer > University of Michigan > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at http://www.educause.edu/ > groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
