yet<br><br>} # server inner-tunnel<br>[peap] Got tunneled reply code 2<br> Service-Type = Framed-User<br> Tunnel-Type:0 = VLAN<br> Tunnel-Medium-Type:0 = 802<br> Tunnel-Private-Group-Id:0 = "120"<br> EAP-Message = 0x030b0004<br>
Message-Authenticator = 0x00000000000000000000000000000000<br> User-Name = "linatest"<br>[peap] Got tunneled reply RADIUS code 2<br> Service-Type = Framed-User<br> Tunnel-Type:0 = VLAN<br> Tunnel-Medium-Type:0 = 802<br>
Tunnel-Private-Group-Id:0 = "120"<br> EAP-Message = 0x030b0004<br> Message-Authenticator = 0x00000000000000000000000000000000<br> User-Name = "linatest"<br>[peap] Tunneled authentication was successful.<br>
[peap] SUCCESS<br>[peap] Saving tunneled attributes for later<br><br>means freeradius sent correctly VLAN attributes, but switch doesn't received them.<br><br>Any one can help me?<br><br><div class="gmail_quote">2010/3/4 omega bk <span dir="ltr"><<a href="mailto:omegabk@gmail.com">omegabk@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><pre><font size="4">means vlan is not communicated between the<br>freeradius and switch, but we don't know why</font></pre>
<br><br><div class="gmail_quote">2010/3/4 omega bk <span dir="ltr"><<a href="mailto:omegabk@gmail.com" target="_blank">omegabk@gmail.com</a>></span><div><div></div><div class="h5"><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">hello,<br><br>still with the same issue about vlan assignment.<br><br>so to sum up<br><br>In my users file:<br>
############<br><br>doctor Cleartext-Password := "mypass"<br> cisco-avpair= "tunnel-type(#64)=VLAN(13)",<br>
cisco-avpair= "tunnel-medium-type(#65) = 802 media(6)",<br> cisco-avpair= "tunnel-private-group-ID(#81) = 100",<div><br> Session-Timeout = "28800",<br>
Termination-Action = "RADIUS-Request"<br><br></div>#######################<br><br>in my switch<br>--------------------<br>aaa new-model<br>aaa authentication dot1x default group radius<br>aaa authorization network default group radius<br>
<br>dot1x system-auth-control<br><br>! <br>interface FastEthernet0/24 => for successful authentication ( client is wired there)<br> switchport access vlan 100 <br> switchport mode access<br> dot1x pae authenticator<br>
dot1x port-control auto<br> dot1x auth-fail vlan 120<br> spanning-tree portfast<br><br>interface FastEthernet0/22<br> switchport access vlan 120<br> switchport mode access<br> spanning-tree portfast<br>! <br>interface FastEthernet0/23<br>
switchport access vlan 120<br> switchport mode access<br> spanning-tree portfast<br><br>radius-server host x.x.x.x auth-port 1812 acct-port 1813 key miamiam<br>radius-server source-ports 1645-1646<br>radius-server retransmit 5<br>
radius-server vsa send authentication<br><br>---------------------------<br><br><br>so the authentication for doctor is good in vlan 100, but if i change to cisco-avpair= "tunnel-private-group-ID(#81) = 120", i'm stuck to vlan 100.<br>
<br>Any noe can help me?<br><br>thanks<br><br><br><br><br><br><br><br><br><div class="gmail_quote">2010/3/4 Alan DeKok <span dir="ltr"><<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>></span><div>
<div></div><div><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div>Jens Link wrote:<br>
> @Alan: I would document VMPS in some more detail in the wiki if my<br>
> access would be working. ;-)<br>
<br>
</div> It seems to be fine now.<br>
<font color="#888888"><br>
Alan DeKok.<br>
</font><div><div></div><div>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div></div></div><br>
</blockquote></div></div></div><br>
</blockquote></div><br>