cisco phones

Alan Buxey alan.buxey at gmail.com
Mon Feb 5 19:01:38 CET 2018


I'm, it's not something basic and stupid like you don't have "=" in your
SQL safe_character list but are trying to use it

As for the attribute value, read the switch documentation for requirements
don't look at what ACS does.

alan

On 5 Feb 2018 1:04 pm, "Alan DeKok" <aland at deployingradius.com> wrote:

> On Feb 5, 2018, at 7:59 AM, Vacheslav <m_zouhairy at skno.by> wrote:
> > I repeat:
> > Here is how it works on acs:
>
>   That's nice.  Maybe ACS is doing something behind the scenes.
>
> > NOTE:ALL these attributes should be defined on the ACS group set for
> phone authentication.
> >
> > cisco-avpair="device-traffic-class=voice"
> > Tunnel-Type=1:VLAN
> > Tunnel-Medium-Type=1:802
> > Tunnel-Private-Group-ID=1:VOICE-LAN
> >
> > All the rest was suggestions given here.
>
>   At this point, there's only one solution.  Use "radsniff" or "wireshark"
> to look at the packets sent by ACS.  Post the Access-Accept that "works"
> here (ASCII, please).
>
>   We can look at it, and tell you how to configure FreeRADIUS to get the
> same response.  My $0.02 is that there is *another* thing needed by the
> phone.  ACS sends it, and FreeRADIUS isn't configured to send it.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html


More information about the Freeradius-Users mailing list