The Switch documentation said: If set to Integer the Vlan-assignment-mode allow the switch to use VLAN ID to tag frames. If set to String it uses VLAN Name instead. We've set the domain as follow : [uac_quid002]dis dom uacdom The contents of Domain uacdom: State = Active RADIUS Scheme = uac_aaa Authentication : RADIUS Scheme = uac_aaa Access-limit = Disable Vlan-assignment-mode = String Domain User Template: Idle-cut = Disable Self-service = Disable Messenger Time = Disable Then change VLAN 2 name from 'Students' to '2', just to match the given value in user toto's record within our LDAP directory. But this does not work. Any idea to help please! ________________________________ De : Attou eric <gouroueric@yahoo.fr> À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Envoyé le : Mardi, 23 Juin 2009, 9h20mn 12s Objet : Re : Re : Radius+Huwaei switch + auto VLan Assignment issue ________________________________ De : "A.L.M.Buxey@lboro.ac.uk" <A.L.M.Buxey@lboro.ac.uk> À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Envoyé le : Lundi, 22 Juin 2009, 19h16mn 31s Objet : Re: Re : Radius+Huwaei switch + auto VLan Assignment issue The domain configuration on our switch look like this : [uac_quid002]dis domain uacdom The contents of Domain uacdom: State = Active RADIUS Scheme = uac_aaa Authentication : RADIUS Scheme = uac_aaa Access-limit = Disable Vlan-assignment-mode = Integer Domain User Template: Idle-cut = Disable Self-service = Disable Messenger Time = Disable So the Vlan-assignment-mode in the domain is Integer. But as the Access-Accept message return Vlan ID in this format : Tunnel-Private-Group-Id:0 = "2" It seems we'd better set Vlan-assignment-mode to string. We'll get you informed. Thanks very much. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Hi,
Unfortunatly, the switch still not switching the port from VLAN 1 to VLAN 2. Maybe there is other misconfigurations on our switch or another settings in radius configurations ?
it looks like theres another config you need to set on the switch port to ensure the AAA server values are taken... check our documentation for things like vlan-assignment-mode (your switch probably uses the VLAN name to tag things rather than its ID number!)