Dynamic VLAN Tag
When the Primary SSID's security is set to WPA-Enterprise, WPA2-Enterprise, WPA-Auto-Enterprise, station can get specific VLAN Tag from RADIUS server to work with VLAN supported switches or other devices if you enable this function.

3. Конфигурация RADIUS-сервера:
Создайте имя пользователя и задайте пароль. Задайте следующие атрибуты для пользователя:
Tunnel-Medium-Type (65) = 802
Tunnel-Pvt-Group-ID (81) = 20 | VID
Tunnel-Type (64) = VLAN

A summary of the Tunnel-Private-Group-ID Attribute format is shown
below. The fields are transmitted from left to right.

0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | Tag | String ...
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

Type
81 for Tunnel-Private-Group-ID.

Length
>= 3

Tag
The Tag field is one octet in length and is intended to provide a
means of grouping attributes in the same packet which refer to the
same tunnel. If the value of the Tag field is greater than 0x00
and less than or equal to 0x1F, it SHOULD be interpreted as
indicating which tunnel (of several alternatives) this attribute
pertains. If the Tag field is greater than 0x1F, it SHOULD be
interpreted as the first byte of the following String field.

String
This field must be present. The group is represented by the
String field. There is no restriction on the format of group IDs.

Я отправлю запрос по этому поводу в HQ,но мне нужна полная топология,конфиг ТД,сниф с порта между Точкой и устройством где поднят ВЛАН 1723 и сниф с порта в 1723 ВЛАНе на мейл

А что решено-то? Почему не работало?