Configuring NPS with dynamic VLAN assignment based on 802.1x authentication on 3com switches

[leonoragroisman]

Hi,

I have several questions about implementing dynamic VLAN assignment based on 802.1x authentication on 3com switches - I hope it is the right place to ask. I'd be very glad to recieve any kind of help, believe me I've already tried to read any relevant material but I still can't understand few very basic things.

My goal is to create several VLANS (for example: Servers, Laptops, Devices), and when a user logs in with his domain credentials - he will be put in the right VLAN (lets say in Laptops VLAN). I don't want to assign statically those ports, because they often move from one office to another. I know this could be achieved by using the NPS server, which will authenticate those users. As for devices - they will be assigned by their MAC address (or in any other way which you can recommend, this is the only way I know).

Bottom line is that I need to enable communication for any device that is connected to the switch, which is not depended in the port that it is plugged to. 

1. Should the VLANS be configured as MAC-based or port-based??

2. Should I assign all ports on the switch to all VLANs I've created? How does it work?

Thanks a lot for your help,

Lena.