← Back to Projects
Business Systems House 2025
Virtual Local Area Network (VLAN) Dynamic Access Architecture
802.1X RADIUS (NPS) Dynamic VLAN Assignment FortiSwitch Active Directory OU
Virtual Local Area Network (VLAN) Dynamic Access Architecture
Automated network edge access control by dynamically assigning VLAN tags to switch ports upon user credentials verification.
Key Features & Implementation
- RADIUS-Driven VLAN Tagging: Configured Windows NPS to return Tunnel-Pvt-Group-ID attributes during 802.1X port authentication.
- Rogue Device Quarantine: Configured un-authenticated fallback VLANs restricting untrusted devices to isolated internet-only guest access.
- Port Access Hardening: Standardized MAC-based bypass (MAB) for non-802.1X IoT devices with central address whitelisting.