<div>Hi,</div> <div> We use peap + AP + fr + AD to authenticate user. Now It can work. But I</div> <div>need to get VLAN from freeradius for different user or group.</div> <div> How should I do?? Please give me some advice, Thanks.</div> <div> </div> <div> I saw below debug info from maillist, from these info I guess freeradius can set VLAN for user or group. </div> <div> </div> <div><U></U> </div> <div><U>Ready to process requests.<BR>rad_recv: Access-Request packet from host 192.168.1.1:1645, id=38, length=149<BR> User-Name = "DOMAIN\\testuser"<BR> Service-Type = Framed-User<BR> Framed-MTU = 1500<BR> Called-Station-Id = "00-19-AA-2C-8F-03"<BR> Calling-Station-Id = "00-08-74-46-2A-A5"<BR> EAP-Message = 0x0202001601434f5250524f4f545c7467646f72686531<BR> Message-Authenticator = 0x9bc11b6f6182f53f6428ad12c48d8f10<BR> NAS-Port =
50001<BR> NAS-Port-Type = Ethernet<BR> NAS-IP-Address = 192.168.1.1<BR> Processing the authorize section of radiusd.conf<BR>modcall: entering group authorize for request 0<BR> rlm_eap: EAP packet type response id 2 length 22<BR> rlm_eap: No EAP Start, assuming it's an on-going EAP conversation<BR> modcall[authorize]: module "eap" returns updated for request 0<BR> users: Matched entry DEFAULT at line 1<BR> modcall[authorize]: module "files" returns ok for request 0<BR>modcall: leaving group authorize (returns updated) for request 0<BR> rad_check_password: Found Auth-Type EAP<BR>auth: type "EAP"<BR> Processing the authenticate section of radiusd.conf<BR>modcall: entering group authenticate for request 0<BR> rlm_eap: EAP Identity<BR> rlm_eap: processing type tls<BR> rlm_eap_tls: Initiate<BR> rlm_eap_tls: Start returned 1<BR> modcall[authenticate]: module "eap" returns handled for
request 0<BR>modcall: leaving group authenticate (returns handled) for request 0<BR>Sending Access-Challenge of id 38 to 192.168.1.1 port 1645<BR></U><U><FONT color=#0000ff> Tunnel-Type:0 = VLAN<BR> Tunnel-Medium-Type:0 = IEEE-802<BR> Tunnel-Private-Group-Id:0 = "vlanX"</FONT><BR> EAP-Message = 0x010300061920<BR> Message-Authenticator = 0x00000000000000000000000000000000<BR> State = 0x67c75e29c6b4d8d32c662ce2d154d277<BR>Finished request 0<BR>Going to the next request<BR>--- Walking the entire request list ---<BR>Waking up in 6 seconds...</U><BR></div><BR><BR><p>
<hr size=1><a href="http://cn.mail.yahoo.com/" target=blank>
ÑÅ»¢Ãâ·ÑÓÊÏä3.5GÈÝÁ¿£¬20M¸½¼þ£¡</a>