7760 - RADIUS questions

[dgunner]

Hi,



I have a 7760 attached to a DMZ leg of my ISA 2006 firewall. The 7760 is configured with 2 SSID, Internal (VLAN 200) and External (VLAN 400). The 7760 management is on VLAN 200.



I can configure the 7760 to authenticate over RADIUS (IAS) a user connected to SSID Internal but the 7760 ignores my IAS setting to say that users in the Internal domain group should be on VLAN 400.



From what I can see, the problem is that the 7760 does not support dynamic VLANs?



What is the alternative? I want internal and external users to be on different SSID and use RADIUS - unless there is a way I can achieve separation on the same SSID?



One other question, as you cannot assign an IP to each SSID, how would I use different RADIUS servers for each SSID? Does all RADIUS traffic go out through the management port?



Thanks