Dynamic VLAN assignment attribute number 65534

  • 1
  • Question
  • Updated 4 years ago
  • Answered
An 802.1x environment with Win 2008 NPS and dynamic VLAN depending on received RADIUS attribute.

The NPS service It ́s configured to send the attribute 81 as:

12 --> User profile 12 --> vlan 12.
13 --> User profile 13 --> vlan 13.

However when I try to authenticate, I received not 12 or 13 but 65534. We haven ́t configured that and we can ́t find a clue where is the mistake.


IP y PSK: ok.
Test RADIUS: ok.

Group12 with attribute 12.
Group 13 with attribute 13.

User Profiles:
Standard attribute 81 "assign user profiles depending on RADIUS attribute"
User Profile 12 --> works fine.
User Profile 13 --> works fine.


12 y 13 --> Full connectity.

Anyone knows what is the attribute 65534?

Raúl Tejeda

Photo of Raúl Tejeda

Raúl Tejeda

  • 4 Posts
  • 0 Reply Likes

Posted 4 years ago

  • 1
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Official Response
I have seen occur this where the mapping to a user profile attribute cannot be performed.

Can I suggest that you use the Filter-Id attribute to perform the mapping as it is standards based and follow the instructions carefully?

Documented as: