asked on

If DHCP then assign user to a different VLAN?

I have a Cisco 3750 stack. All corporate users connect via VLAN1 and a static IP Address.
Often we have guests who plug into our network. They currently obtain a DHCP address and
end up on VLAN1 with all our other users. Is there a way for anyone with an IP address to
connect to VLAN1 and have anyone requesting a DHCP address to end up on a different VLAN?

I want to route the DHCP users out of our network directly to the internet while keeping
them off our end user VLAN1.

ASKER CERTIFIED SOLUTION

akalbfell

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

sidetracked

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

vivigatt

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

akalbfell

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

First Last

ASKER

I don't have a Cisco ACS. I'm using Server 2008 R2 with the RADIUS via the NPS. Any ideas on how to get the 2008 Radius to accept requests from the switch?

aaa authorization network default group radius

interface FastEthernet5/0/31
switchport mode access
authentication event fail action authorize vlan 6
authentication event no-response action authorize vlan 6
authentication port-control auto
dot1x pae authenticator
dot1x timeout tx-period 4
dot1x timeout supp-timeout 5

radius-server host 10.35.208.9 auth-port 1645 acct-port 1646 key cisco123