Vlan dynamic and Wifiwave2

RouterOS Wireless Networking
1

Good afternoon, I have the following scenario, but I can't configure it

  1. Hardware: cAP ax, wifi-qcom package, RouterOS 7.23.1

  2. Scenario: WPA2-Enterprise with PEAP, authentication against Windows Server NPS (AD groups)

  3. Objective: dynamically assign VLAN10 vs VLAN45 according to the AD group of the authenticated user

  4. Confirmed that it works: NPS applies the correct policy (event 6272 verified), the fixed datapath works perfectly for static VLAN

  5. Unsuccessful try: standard Tunnel-* attributes (RFC 2868), VSA Mikrotik-Wireless-VLANID in three encoding formats, datapath without vlan-id, Access List with vlan-id (without query-radius, which does not exist in this version)

  6. Specific question: Is this mechanism possible in the EAP/PEAP flow with wifi-qcom, or does it only apply to MAC authentication?

2

Reading this post for CAPsMAN and RADIUS: Step by Step tutorial on Enabling Dynamic VLANs using CAPsMAN and the new User Manager on ROS7 - #2 by tuxtlequino , it should be possible to configure it