<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman,new york,times,serif;font-size:12pt"><div>Hi the list<br><br>I'm sure this is NAS question, not Freeradius' question. But perhaps <br><br>somebody on the list had experienced this issue. Here is my problem.<br><br>I setup :<br><br> - A Freeradius configuration EAP/PEAP with user credentials stored in LDAP directory.<br><br> - A NAS zcomax ag3621 wireless access point with VLAN 802.1q support. on this <br> <br> access point, i have one SSID associated by default with guest VLAN 30. meaning if a <br><br> user failed authentication, he will still connected but on this VLAN with reduced privileges.<br><br>However radius return the following Access-accept packet to my NAS,<br><br> Sending Access-Accept of id 81 to 192.168.32.88 port
1032<br> Tunnel-Private-Group-Id:0 = "60"<br> Tunnel-Medium-Type:0 = IEEE-802<br> Tunnel-Type:0 = VLAN<br> User-Name = "user1"<br><br> <br> The access point just put user1 on VLAN 30. My NAS ignore the VLAN ID 60 (Tunnel-Private-Group-Id:0 = "60")<br><br>contained in the Access-Accept. I try with two different models of Access point (zcomax and cisco)<br><br> My question: Is there a particular config to do to ask the NAS to consider the VLAN ID contained in<br><br> the Access-Accept packet ?<br><br> Thanks for your answers<br></div>
</div><br>
</body></html>