Forum

Boognish,

You can change the role or VLAN of a user at authentication time based on radius attributes. On the IAS side, you would write a remote access rule that looks for a group (student) for example, and in the "Advanced" tab of that rule, it will allow you to pass back a Radius Attribute that will be sent to the controller if the rule is satisfied. On the Aruba side, in the Server group, you would write a rule that looks for that attribute and put the user in a role or VLAN based on that attribute.

The short answer is yes.