You are right, I know! On Friday 19 July 2013 15:52:43 A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
I am configuring my freeradius to be integrated in the EDUROAM federation. It works when the VLAN (as configured in the accesspoint) is statically assigned.
there are hundreds of sites using this sort of configuration for eduroam - so its perfectly possible and fine (and standard!) so you're going wrong somewhere.
so, thats the piece of mind part. where has it gone wrong? well, firstly, is there DHCP etc on the VLAN this client is being dropped onto? have you tested the network? what happens if the AP only handles that VLAN?
The specific configuration works fine I remove the following line from users file: Tunnel-Type := VLAN, Tunnel-Medium-Type := IEEE-802, Tunnel-Private- Group-ID := 218 In this case the user is placed in the vlan 220 (the statically configured in the accesspoint).
is this a 'fat/autonomous' AP? if so, then only latest firmware can handle multiple VLANS per 802.1X SSID with multiple BSSIDs present.
This could be the problem, I found something in the Cisco documentation but was unsure the problem could be this. The accesspoint is running Cisco IOS Software, C1130 Software (C1130-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1) I will try to verify what you say on the cisco site. My accesspoints are End Of Life, I do not know if any new IOS version has been developed to eventually correct the problem you say.
are you returning ALL the VLAN attributes needed to assign VLAN on the AP? not JUST the VLAN number..name.... ah yes, are you sending NAME or VLAN int he VLAN tag?
number
are you sending the replys from the tunnel = check eap.conf settings!
eap.conf (in peap stanza) says: copy_request_to_tunnel = yes use_tunneled_reply = yes
debug output helps a lot so yes, send it.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks for your directions (many) Dario