Use update control for VLAN with ntlm_auth

[Torsten Wilms]

Hello @all


I use free radius version 3.0.10 and the ntlm_auth for authenticate users via 802.1x over the AD
Now i wan’t to setup switches with dynamic VLAN configuration.

I tried to use in the authorize section unter default and inner-tunnel

mschap
if ( ok ) {
	update control {
		Tunnel-Type = 13,
		Tunnel-Medium-Type = 6,
		Tunnel-Private-Group-Id = 8
	}
                }


But no effect.

Also i tried to use

authenticate {
	ntlm_auth
	Auth-Type PAP {
		pap
	}
	Auth-Type CHAP {
		chap
	}
	Auth-Type MS-CHAP {
		mschap
		if ( ok ) {
			update control {
				Tunnel-Type = 13,
				Tunnel-Medium-Type = 6,
				Tunnel-Private-Group-Id = 8
		}

	}
}


But it doesn’t work.

How can i use update control if ntlm_auth was successful?


Thanks a lot 

Torsten