Dear Alan, The problem are not the fields, but where I shall insert them in the current "proxy" related config. Right now, in "users" file I've this DEFAULT that works fine for my local @my-realm.com, but not for external "@ACME.COM", The proxy returns ok, but without fields for Aruba. DEFAULT Aruba-User-Vlan = <vlaind number>, Aruba-User-Role = "authenticated", (....) Termination-Action = 1, Reply-Message = "WELCOME TO @ MY-REALM.COM", Session-Timeout = 3600, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802 Any clue about? Kindest Regards. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+escriba=cells.es@lists.freeradius.org] On Behalf Of Alan DeKok Sent: viernes, 13 de octubre de 2017 13:21 To: FreeRadius users mailing list Subject: Re: proxy request ok, but incomplete access-accept to my Aruba On Oct 13, 2017, at 6:17 AM, Ramon Escriba <escriba@cells.es> wrote:
It works perfect with my @my-realm.com, but when I send test realms to the external proxy, it accepts the query (see below logs),
That's good.
but seems the Access-Accept packet does not complete the fields my Aruba needs to open the vlan, as I do in @my-realm.com with users file.
That's not good.
How can I complete the "Access-Accept" packet I send to my Aruba?
Read the Aruba documentation to see what attributes it needs. Then, configure FreeRADIUS to send those attributes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html