<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">It still doesn’t work :(<br>
<br>
Sorry but I have been working on RFC 4675 for a long time before I
emailed this list, which is why I was a bit short in my first
reply (sorry) and jumped the gun before reading all of your email.
I /really/ have trawled every page I can find..<br>
<br>
I have changed OpenLDAP to 0x3100000C (thanks for pointing that
silly mistake out), and I get a reply from FreeRADIUS with;<br>
<br>
Sending Access-Accept of id 48 to 10.0.0.242 port 1812<br>
Framed-Protocol = PPP<br>
Framed-Compression = Van-Jacobson-TCP-IP<br>
Egress-VLAN-Name = "VLAN12"<br>
Egress-VLANID = 822083596<br>
HP-Cos = "3"<br>
Finished request 1.<br>
<br>
And on the switch I have defined the VLAN;<br>
vlan 12<br>
name "VLAN12"<br>
ip address 10.2.46.242 255.255.255.0<br>
ip helper-address 10.0.0.1<br>
ip igmp<br>
exit<br>
<br>
But I still get the error on the switch;<br>
0049:03:54:30.02 MAC mWebAuth:Port: 29 MAC: 080027-e4b2cd new
client detected on vid: 1.<br>
0049:03:54:30.02 MAC mWebAuth:Port: 29 MAC: 080027-e4b2cd RADIUS
CHAP authentication started, session: 2991.<br>
0049:03:54:30.04 MAC mWebAuth:Port: 29 MAC: 080027-e4b2cd vid
attribute error during RADIUS processing.<br>
0049:03:54:30.04 MAC mWebAuth:Port: 29 MAC: 080027-e4b2cd client
rejected, session: 2991, invalid attributes.<br>
0049:03:54:30.04 MAC mWebAuth:Port: 29 MAC: 080027-e4b2cd client
authentication failed, login retry count: 1 >= max-retires: 0,
no unauth-vid configured, entering quiet-period: 30 seconds.<br>
W 08/06/13 10:06:28 02400 dca: macAuth client, RADIUS-assigned VID
validation error. MAC 080027E4B2CD port 29 VLAN-Id 0 or unknown.<br>
<br>
<br>
I can get RFC 3580 to work fine with the following;<br>
Sending Access-Accept of id 50 to 10.0.0.242 port 1812<br>
Framed-Protocol = PPP<br>
Framed-Compression = Van-Jacobson-TCP-IP<br>
HP-Cos = "3"<br>
Tunnel-Private-Group-Id:0 = "11"<br>
Tunnel-Medium-Type:0 = IEEE-802<br>
Tunnel-Type:0 = VLAN<br>
Finished request 3.<br>
<br>
<br>
But I really need to get Tagged VLAN working!<br>
<br>
If no one has any ideas I'll try and raise a support call with
HP.. Wish me luck I may never return and be lost in their 'support
system' forever...! ;)<br>
<br>
<br>
<br>
On 05/08/13 23:59, Arran Cudbard-Bell wrote:<br>
</div>
<blockquote
cite="mid:5CD1F02D-94FE-4DFC-B320-7A022493CD2A@freeradius.org"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<br>
<div>
<div>On 5 Aug 2013, at 23:39, Andy <<a moz-do-not-send="true"
href="mailto:andy@brandwatch.com">andy@brandwatch.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">Hello,<br>
<br>
This is my first post here so please excuse any missed
etiquette.<br>
<br>
I have read through the wiki's and googled a lot and not found
anything.<br>
</blockquote>
<div><br>
</div>
<div><a moz-do-not-send="true"
href="http://wiki.freeradius.org/vendor/HP#RFC-4675-%28multiple-tagged/untagged-VLAN%29-Assignment">http://wiki.freeradius.org/vendor/HP#RFC-4675-(multiple-tagged/untagged-VLAN)-Assignment</a></div>
<div><br>
</div>
<div>*sigh*</div>
<div><br>
</div>
<blockquote type="cite">I have been trying configure our switch
ports (HP 2910al) with Tagged VLANs via Egress-VLANID and
Egress-VLAN-Name.<br>
<br>
The Radius backend is OpenLDAP, and I have tried setting the
data type in OpenLDAP to binary, UTF-8 and IA5, but no matter
what I do, the value returned by RADIUS is the decimal
equivalent of the HEX bit string I enter :(<br>
<br>
For example I'm trying to store and send 0x31000012 to
indicate a tagged VLAN (0x31) on VLAN 12. But looking at
freeradius -X output I can see it sending the decimal number,
when the switch wants the bit string as it was stored, and
hence throws an error!<br>
</blockquote>
<div><br>
</div>
<div>No. The HP switch does not care that FreeRADIUS displayed
(but later encoded correctly) your hex string as an integer.</div>
<div><br>
</div>
<div>It does care that you don't seem to understand how to
convert decimal numbers to hex and are actually specifying
VLAN 18 tagged, which probably doesn't exist if you're getting
errors.</div>
<div><br>
</div>
<div>You want 0x3100000C for VLAN 12 tagged.</div>
<div><br>
</div>
<div>-Arran</div>
</div>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></pre>
</blockquote>
<br>
</body>
</html>