VMPS fallback vlan

[Walter Gould]

On 02/09/2012 11:40 AM, Phil Mayers wrote:
> On 09/02/12 15:49, Walter Gould wrote:
>> All,
>>
>> I have FR vmps configured to query postgresql for a mac address and
>> return the vlan that is assigned to it. That is working well. However, I
>> would like to configure vmps to return a "fallback" or guest vlan for
>> cases when a mac address is not in the database.
>>
>> Can anyone give me some suggestions or config examples?
>
> This depends entirely on how you are settings the VLAN for "known" 
> users. If you can show the config you are using, I can be more 
> specific, but basically you check for the "not found" state, or check 
> for the "reply vlan not set" state.
>
> For example:
>
> vmps {
>   ...
>   sql
>   if (notfound) {
>     update reply {
>       VMPS-... = ...
>     }
>   }
>   ...
> }
>
> Possibly the most general thing is:
>
> vmps {
>   ...
>   sql
>   ...
>   if (!reply:VMPS-VLAN-Name) {
>     update reply {
>       VMPS-VLAN-Name = GUEST
>     }
>   }
> }
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html

Phil,

Thanks for your reply.   I tried what you mentioned above, but cannot 
seem to get it to work.  Below is my vmps file and debug output.  Any 
suggestions will be appreciated.

Thanks,
Walter


vmps {
                 #
                 #  Some requests may not have a MAC address.  Try to
                 #  create one using other attributes.
                 if (!VMPS-Mac) {
                         if (VMPS-Ethernet-Frame =~ 
/0x.{12}(..)(..)(..)(..)(..)(..).*/) {
                                 update request {
                                         VMPS-Mac = 
"%{1}:%{2}:%{3}:%{4}:%{5}:%{6}"
                                 }
                         }
                         else {
                                 update request {
                                         VMPS-Mac = "%{VMPS-Cookie}"
                                 }
                         }
                 }

                 #  Do a simple mapping of MAC to VLAN.
                 #
                 #  See radiusd.conf for the definition of the "mac2vlan"
                 #  module.
                 #
                 mac2vlan

                 # required VMPS reply attributes
                 update reply {
                         VMPS-Packet-Type = VMPS-Join-Response
                         VMPS-Cookie = "%{VMPS-Mac}"

                         #
                         #  If you have VLAN's in a database, you can select
                         #  the VLAN name based on the MAC address.
                         #
                         VMPS-VLAN-Name = "%{sql:select vlan from users 
where mac='%{VMPS-Mac}'}"

                 }


                 if (!reply:VMPS-VLAN-Name) {
                            update reply {
                            VMPS-VLAN-Name = "Guests"
                             }
                 }


                 # correct reply packet type for reconfirmation requests
                 #
                 if (VMPS-Packet-Type == VMPS-Reconfirm-Request){
                         update reply {
                                 VMPS-Packet-Type := VMPS-Reconfirm-Response
                         }
                 }

                 linelog
         }

         # Proxying of VMPS requests is NOT supported.
}



Here's the debug:


         VMPS-Packet-Type = VMPS-Join-Request
         VMPS-Error-Code = VMPS-No-Error
         VMPS-Sequence-Number = 2449
         VMPS-Client-IP-Address = switch_ip
         VMPS-Port-Name = "Gi1/0/12"
         VMPS-VLAN-Name = "--NONE--"
         VMPS-Domain-Name = "gangsta"
         VMPS-Unknown = 0x00
         VMPS-MAC = d4:be:d9:12:20:6c
server vmps {
Doing VMPS
+- entering group vmps {...}
++? if (!VMPS-Mac)
? Evaluating !(VMPS-Mac) -> FALSE
++? if (!VMPS-Mac) -> FALSE
++[mac2vlan] returns notfound
         expand: %{VMPS-Mac} -> d4:be:d9:12:20:6c
sql_xlat
         expand: %{User-Name} ->
sql_set_user escaped user --> ''
         expand: select vlan from users where mac='%{VMPS-Mac}' -> 
select vlan from users where mac='d4:be:d9:12:20:6c'
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 0 , fields = 1
SQL query did not return any results
rlm_sql (sql): Released sql socket id: 4
         expand: %{sql:select vlan from users where mac='%{VMPS-Mac}'} ->
++[reply] returns notfound
++? if (!reply:VMPS-VLAN-Name)
? Evaluating !(reply:VMPS-VLAN-Name) -> FALSE
++? if (!reply:VMPS-VLAN-Name) -> FALSE
++? if (VMPS-Packet-Type == VMPS-Reconfirm-Request)
? Evaluating (VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE
++? if (VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE
[linelog]       expand: %S %{VMPS-Mac} %{reply:VMPS-VLAN-Name} 
%{VMPS-Client-IP-Address} %{VMPS-Port-Name} -> 2012-02-10 14:41:01 
d4:be:d9:12:20:6c  switch_ip Gi1/0/12
++[linelog] returns ok
Done VMPS
} # server vmps
         VMPS-VLAN-Name = ""
         VMPS-Cookie = d4:be:d9:12:20:6c
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 0 ID 2449 with timestamp +123
Ready to process requests.