Cisco WLC + freeradius

LEONARDO FELL leofell at univates.br
Mon Dec 19 17:35:37 CET 2011


Thanks you for your attention..

I changed the attribute but unfortunately it didn't work anyway..:
Sending Access-Accept of id 123 to 10.1.0.161 port 32769
        Tunnel-Private-Group-Id:0 = "85"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        Filter-Id = "Enterasys:version=1:policy=Aluno"
        MS-MPPE-Recv-Key = 0xae13f576b423a40084248c8977618104e42dafb4153e556f1e6b06da85ab7d46
        MS-MPPE-Send-Key = 0x40e5448be214dfbf2fb5a16cb04fde4b70ee543850ba4a8c88fbf6e59f4a39aa
        EAP-Message = 0x030c0004
        Message-Authenticator = 0x00000000000000000000000000000000
        User-Name = "leofell"


I don't know what is the problem, I have an interface vlan ID 85 on the WLC, I marked "AAA overide" on the wlan configuration..
Do you know what anymore else I could do ?
Cheers!
--
Leonardo Fell


----- Mensagem original -----
De: "Alan Buxey" <A.L.M.Buxey at lboro.ac.uk>
Para: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
Enviadas: Segunda-feira, 19 de Dezembro de 2011 14:08:39
Assunto: Re: Cisco WLC + freeradius

Hi,

> However, when a try to connect, the freeradius replies a "0" (ex: Tunnel-Private-Group-Id:0) after the attribute, as you can see below:
> 
> Sending Access-Accept of id 146 to 10.1.0.161 port 32768
>         Tunnel-Private-Group-Id:0 = "85"
>         Tunnel-Medium-Type:0 = 802
>         Tunnel-Type:0 = VLAN
>         Filter-Id = "Enterasys:version=1:policy=Aluno"
>         MS-MPPE-Recv-Key = 0xcfcf3c464de734110cda4f22dc1ed36c2e7e5c629861059036e61fb5e98d104b
>         MS-MPPE-Send-Key = 0x8115583c24b0c533eca2417e1a82e092bd908417dee2cecdeb3b89d857f4634f
>         EAP-Message = 0x030c0004
>         Message-Authenticator = 0x00000000000000000000000000000000
>         User-Name = "leofell"
> 
> I think it may the problem and I'd like to know why it happens..

nope. no problem eg


        Tunnel-Type:0 = VLAN
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Private-Group-Id:0 = "666"

its perfectly fine to have the :0


but as you can see from my example log output...i define the Medium-Type
properly - change yours to match and it might work for you :-)

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list