3com problem with service-type

Nuno Cervaens Nuno.Cervaens at cern.ch
Wed Jul 19 16:38:14 CEST 2006


Hi guys,

I have a lot of hp switches and a lot of 3com switches.
I have users that I want them to have Administrator privilege and others 
that will have NAS-Prompt privilege.
So, my users files should be like this, so it can work for both brands:

userA Password = pass
        Service-Type = 7,
        3Com-User-Access-Level = 1

userB Password = pass
        Service-Type = 6,
        3Com-User-Access-Level = 3

The problem is that 3COM doesnt accept a service-type =7! It only 
accepts Service-Type = 6! So the 3COM rejects the access-accept from 
RADIUS for userA.
I know that I can use huntgroups and create for each huntgroup a 
different account for the same user with different attributes, but I 
dont want to use huntgroups because I already use it for Mac-address 
authentication (and apparently a same NAS-IP-Address cannot belong to 
more than 1 huntgroup as RADIUS returns the first huntgroup that matches 
the NAS-IP-Address).

Does anyone has a solution for my problem?

Thanks,
Nuno



More information about the Freeradius-Users mailing list