I set up 802.1x on the wifi and now I want to configure dynamic vlan. Only problem: the AP (TP-Link Archer C7 v2 w/stock firmware) doesn't support vlans. Let me be a bit more visual: a network diagram. The important part here is: client -> wireless router -> layer 3 switch -> RADIUS.
In the web-config of the wireless router (AP) I set it to wpa-enterprise and set the radius server. The network settings like DHCP are controlled by the L3 switch. This works.
Now I want to use dynamic VLANs (freeRadius logic, AD groups). My switch understands VLANs, but my AP doesn't. How do I pass VLAN ID to the switch?
So the AP is talking to RADIUS, RADIUS responds to AP; this passes through the switch. The switch even provides an IP for the client, but it is unaware of the VSA provided by the RADIUS server.
How can I make this work?