freeradius auto-vlan 3com switch 4500G

Philippe Breton pbreton at wustl.edu
Sat Nov 10 00:02:58 CET 2007


On Fri, 2007-11-09 at 21:58 +0100, tnt at kalik.co.yu wrote:
> VLAN 2u not 2 has been assigned. Check node entry.

Ivan.
Thanks. I have corected it, but no luck yet. Someone else has suggested
to use a different tunnel-medium-type: Tunnel-Medium-Type = IEEE-802. I
checking this lead now.
Thanks,

Philippe

> 
> Ivan Kalik
> Kalik Informatika ISP
> 
> Dana 9/11/2007, "Philippe Breton" <pbreton at wustl.edu> piše:
> 
> >HI,
> >
> >Has anyone successfully implemented auto-vlan with 3Com switch 4500G?
> >
> >I am using the following tunneling attributes:
> >
> >ATTRIBUTE    Tunnel-Type               64    integer    has_tag
> >ATTRIBUTE    Tunnel-Medium-Type        65    integer    has_tag
> >ATTRIBUTE    Tunnel-Private-Group-Id   81    string    has_tag
> >VALUE        Tunnel-Type               VLAN    13
> >VALUE        Tunnel-Medium-Type        TMT802        6
> >
> >The node is declared as followed:
> >
> >##IT Dell Inspiron 4000 laptop -- DHCP
> >00-09-5b-61-52-0d  Auth-Type := Local, User-Password == "00-09-5b-61-52-0d"
> >                   Tunnel-Medium-Type = TMT802,
> >                   Tunnel-Private-Group-id = 2,
> >                   Tunnel-Type = VLAN,
> >
> >Although my radius access request shows that the access has been granted
> >and the VLAN 2 assigned, the switch 4500G does not open its port on VLAN 2.
> >
> >I changed the tunnel-medium-type between TMT802 and 802, but that did
> >not change anything.
> >
> >I am currently doing auto-vlan with 3com 4400 with the same
> >configuration and it is working like a charm. Any idea why the switch
> >does automatically adjust?
> >
> >Any beginning of information is welcome.
> >
> >Thanks,
> >
> >Philippe
> >
> >
> >_RADIUS ACCESS_REQUEST LOG_
> >rad_recv: Access-Request packet from host 172.20.181.201:1024, id=41,
> >length=126
> >        User-Name = "00-09-5b-61-52-0d"
> >        User-Password = "00-09-5b-61-52-0d"
> >        NAS-IP-Address = 172.20.181.201
> >        NAS-Identifier = "4500G"
> >        NAS-Port = 16809985
> >        NAS-Port-Type = Ethernet
> >        Service-Type = Framed-User
> >        Framed-Protocol = PPP
> >        Calling-Station-Id = "0009-5b61-520d"
> >  Processing the authorize section of radiusd.conf
> >modcall: entering group authorize for request 0
> >  modcall[authorize]: module "preprocess" returns ok for request 0
> >  modcall[authorize]: module "chap" returns noop for request 0
> >  modcall[authorize]: module "mschap" returns noop for request 0
> >    rlm_realm: No '@' in User-Name = "00-09-5b-61-52-0d", looking up
> >realm NULL
> >    rlm_realm: No such realm "NULL"
> >  modcall[authorize]: module "suffix" returns noop for request 0
> >  rlm_eap: No EAP-Message, not doing EAP
> >  modcall[authorize]: module "eap" returns noop for request 0
> >    users: Matched entry 00-09-5b-61-52-0d at line 2
> >  modcall[authorize]: module "files" returns ok for request 0
> >modcall: leaving group authorize (returns ok) for request 0
> >  rad_check_password:  Found Auth-Type Local
> >auth: type Local
> >auth: user supplied User-Password matches local User-Password
> >Login OK: [00-09-5b-61-52-0d] (from client switch201 port 16809985 cli
> >0009-5b61-520d)
> >Sending Access-Accept of id 41 to 172.20.181.201 port 1024
> >        Tunnel-Medium-Type:0 = TMT802
> >        Tunnel-Private-Group-Id:0 = "2u"
> >        Tunnel-Type:0 = VLAN
> >Finished request 0
> >
> >
> >
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list