I have a Enterasys HiPath controller that Im trying to pass an attribute to throw the user into the correct policy upon authentication. I talked with their support and they say to set the Filter-Id attribute to the name of the policy set on the controller. I did, but it doenst seem to pass. In the debug for radius I get this:<br>
<br><br style="font-family: courier new,monospace;"><div style="margin-left: 40px;"><span style="font-family: courier new,monospace;">[peap] Got tunneled reply RADIUS code 2</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Filter-Id = "Faculty"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> EAP-Message = 0x03080004</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Message-Authenticator = 0x00000000000000000000000000000000</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> User-Name = "ktest"</span><br>
</div><br>and it goes on to:<br><br style="font-family: courier new,monospace;"><div style="margin-left: 40px;"><span style="font-family: courier new,monospace;">Cleaning up request 18 ID 109 with timestamp +12</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> User-Name = "ktest"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> NAS-IP-Address = 127.0.4.1</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> NAS-Port = 222</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Framed-MTU = 1400</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Called-Station-Id = "00:1f:45:7f:83:fa"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Calling-Station-Id = "00:24:d6:a6:ce:ce"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> NAS-Port-Type = Wireless-802.11</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> NAS-Identifier = "TEST"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Siemens-AP-Serial = "0500010143052305"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Siemens-AP-Name = "AP09"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Siemens-VNS-Name = "TEST"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Siemens-BSSID = "TEST"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Siemens-BSS-MAC = "00:1f:45:7f:83:fa"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Siemens-Policy = "Students"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Siemens-Topology = "TopoStudents"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Siemens-Ingress-Rate = "Unlimited"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Siemens-Egress-Rate = "Unlimited"</span><br></div><br>I use LDAP (via eDirectory) on the backend and authentication is working fine. It pulls the correct value for the Filter-Id attribute, but it doesnt seem to take effect. The Siemens-xxx attributes are coming from the controller and you can see based on the <span style="font-family: courier new,monospace;">Siemens-Policy = "Students" </span>attribute that the student policy is still applying - not the Faculty policy as is defined in the Filter-Id attribute. I have also tried to set the Siemens-Policy attribute on the user but that did not work either.<br>
<br>Am I missing something in the config to have this value sent back to the NAS?<br><br>FreeRadius 2.1.8<br>