VLAN-mapping by DEFAULT Entry fails

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Tue May 23 09:46:31 CEST 2006


Hi,

> I use a WindowsXP, EAP-Type MD5-challenge as supplicant and a Cisco Catalyst Switch 3750 as authenticator and i want that user hugo will be mapped in VLAN 50 on the switch. This works properly.
> 
> Every other user should be mapped in VLAN 999, my guest-vlan. I try this with a DEFAULT-entry, but this does not work, the switch does not accept any other user, in my case user nobody is unauthorized for my authenticator.

those who dont have dot1x supplicant wouldnt be able to be put onto this VLAN
though as there would be no do1x exchange...surely?

surely using the built in guest VLAN facility of the switch itself
is the best way to achieve this aim? 

eg in the interface configuration

dot1x guest-vlan 999

?

alan



More information about the Freeradius-Users mailing list