Dynamic VLAN Using Radius Mac Authentication

https://anton.lindstrom.io/radius-mac/

by chime • 4 years ago

4 1 4 years ago

anton.lindstrom.io

chime• 4 years ago

We have 50+ Unifi APs at our facility and have 10+ VLANs. By default, each VLAN needs its own SSID if you want to use WPA2-PSK. WPA2-Enterprise supports multiple VLANs but most of our simple devices don't work with WPA2-Enterprise. Since too many SSIDs reduce performance and we couldn't easily upgrade to a system that supports Private-PSK or built-in MAC-based-VLAN, we were looking for a good solution. I came across this tiny utility and am glad to say that within a few hours, we had it all hooked up and working! Works great with systemctl too: https://github.com/carlanton/radius-mac/

You need to setup your Unifi Wifi SSID with radius-MAC auth and point to this service. Edit the configuration file with MAC addresses of all your devices and the VLANs they need to be on. Then when the devices join the same SSID with the same PSK, they will be assigned to separate VLANs and the DHCP server can take over. I decided to share this because I just stopped by a hospital and saw over 10 separate SSIDs, most likely one for each VLAN. Hope this helps reduce wireless congestion for you.

Dynamic VLAN Using Radius Mac Authentication

Related Stories