When configuring a wireless network for dynamic VLAN allocation, which three IETF attributes must be supplied by the radius server? (Choose three.)

When configuring a wireless network for dynamic VLAN allocation, which three IETF attributes must be supplied by the radius server? (Choose three.)
A . 81 Tunnel-Private-Group-ID
B . 65 Tunnel-Medium-Type
C . 83 Tunnel-Preference
D . 58 Egress-VLAN-Name
E . 64 Tunnel-Type

View Answer

Answer: A, B, E

Explanation:

The RADIUS user attributes used for the VLAN ID assignment are:

IETF 64 (Tunnel Type)―Set this to VLAN.

IETF 65 (Tunnel Medium Type)―Set this to 802

IETF 81 (Tunnel Private Group ID)―Set this to VLAN ID.

Reference: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/71683-dynamicvlan-config.html

Dynamic VLAN allocation is a feature that allows wireless clients to be assigned to different VLANs based on RADIUS attributes returned by the authentication server. The three IETF attributes that must be supplied by the RADIUS server are: 81 Tunnel-Private-Group-ID, which specifies the VLAN ID for the client; 65 Tunnel-Medium-Type, which specifies the tunneling protocol as IEEE-802 (Ethernet); and 64 Tunnel-Type, which specifies the tunneling method as VLAN.

Reference: FortiOS 6.4.0 Handbook – Wireless Controller, page 60; FortiAP / FortiWiFi 6.4.0 Administration Guide, page 68.