24 Mar
2023
24 Mar
'23
10:17 a.m.
After configuring dictionary.bay as suggested by Igor, the Freeradius server is not sending RADIUS: radGenVendorValpairs: vendor_id = 1584 RADIUS: radGenValpairs: len = 6 I am not sure what needs to be configured in the users file to send these attributes. Shamsher On Fri, Mar 24, 2023 at 5:53 AM Jonathan Davis <jonathan@prioritycolo.com> wrote: > Where are you getting stuck, or what part are you having trouble with ? > > > On Mar 24, 2023, at 12:12 AM, shamsher singh <mr.shamshersingh@gmail.com> > wrote: > > > > The Radius Server needs to send the VSP switch Vendor Specific Attribute > > (VSA) identified as Attribute 26 > > > > > > - The Vendor Code value for the Vendor Specific Attribute is: 1584. > > - The Vendor Assigned Attribute Number for the Vendor Specific > Attribute > > is 192. > > - The Attribute Format for the Vendor Specific Attribute is: decimal. > > - The Attribute Value for the Vendor Specific Attribute is 6. > > > > > > I need to know how to define VSA in Freeradius, the way the windows > radius > > server defines it, please see the link it shows how its defined on the > > windows radius > > > > https://extremeportal.force.com/ExtrArticleDetail?an=000057339 > > > > Shamsher > > > >> On Thu, Mar 23, 2023 at 5:39 PM Igor Smitran <sigor@blic.net> wrote: > >> > >> Look at the freeradius dictionary files: > >> > >> dictionary.nortel (VENDOR id 562) or dictionary.bay (Vendor ID 1584 - > >> Bay-Networks is now Nortel) > >> > >> I don't know what do you want to accomplish with attribute 26? > >> > >> In case you don't have needed attributes you can add them to files > >> mentioned above. > >> > >> > >> For example: > >> > >> to dictionary.bay (id 1584) add lines: > >> > >> ATTRIBUTE Access-Priority 192 integer > >> > >> ATTRIBUTE Cli-Commands 193 string > >> > >> ATTRIBUTE Command-Access 194 integer > >> > >> ATTRIBUTE Commands 195 string > >> > >> ATTRIBUTE EAP-Port-Priority 196 integer > >> > >> > >> In your freeradius dictionary config file add include line for your bay > >> dictionary: > >> > >> $INCLUDE /usr/share/freeradius/dictionary.bay > >> > >> > >> Igor > >> > >> > >>> On 23.3.23. 23:01, shamsher singh wrote: > >>> How would I configure the following on the Freeradius, the following > >> works > >>> on the Windows server 2016 radius client. > >>> > >>> The following are the default RADIUS Vendor Specific Attribute values > >>> supported by VOSS switches. The same attribute values need to be > >> configured > >>> on RADIUS server. > >>> > >>> The RADIUS server needs to be configured to send the Vendor Specific > >>> Attribute (VSA), identified as Attribute 26, back to the VSP containing > >> the > >>> following values: > >>> > >>> - The Vendor Code value for the Vendor Specific Attribute is: 1584. > >>> - The Vendor Assigned Attribute Number for the Vendor Specific > >> Attribute > >>> is 192. > >>> - The Attribute Format for the Vendor Specific Attribute is: > decimal. > >>> - The Attribute Value for the Vendor Specific Attribute is 6. > >>> > >>> Attribute 26 which is the Vendor-Specific attribute (VSA) within RADIUS > >>> which encapsulates vendor specific attributes. Attribute 26 allows > >> vendors > >>> to support their own custom attributes. > >>> > >>> Shamsher > >>> > >>>> On Sat, Mar 4, 2023 at 6:02 AM Igor Smitran<sigor@blic.net> wrote: > >>> > >>>> It looks like you are sending attribute that your switch doesn't > >> recognize. > >>>> > >>>> Maybe you should send something like > >>>> > >>>> Access-Priority = 6 > >>>> > >>>> instead of > >>>> > >>>> Service-Type = Administrative-User > >>>> > >>>> Maybe your switch rejects all access requests that contain > unrecognized > >>>> attributes. > >>>> > >>>> Also, you should include freeradius dictionary in freeradius in case > you > >>>> didn't. > >>>> > >>>> > >>>> Igor > >>>> > >>>> On 4.3.23. 02:18, Alan DeKok wrote: > >>>>> On Mar 3, 2023, at 7:48 PM, shamsher singh< > mr.shamshersingh@gmail.com> > >>>> wrote: > >>>>>> As per the Extreme support > >>>>> Copying web pages to the mailing list won't help. > >>>>> > >>>>>> eg : "Free Radius" Script : > >>>>> That's a dictionary. We know what it is. We already have copies. > >>>>> > >>>>>> I am not sure what else to configure on the switch or on the > >> Freeradius. > >>>>> It's a networking issue, or a shared secret issue. > >>>>> > >>>>> FreeRADIUS sends an Access-Accept. FreeRADIUS is working fine. > >>>>> > >>>>> Something else in the network is broken. We don't know what it > is. > >>>> But we do know that it's not FreeRADIUS. > >>>>> This is not a problem we can help with. > >>>>> > >>>>> Alan DeKok. > >>>>> > >>>>> - > >>>>> List info/subscribe/unsubscribe? Seehttp:// > >>>> www.freeradius.org/list/users.html > >>>> - > >>>> List info/subscribe/unsubscribe? See > >>>> http://www.freeradius.org/list/users.html > >>>> > >>> - > >>> List info/subscribe/unsubscribe? Seehttp:// > >> www.freeradius.org/list/users.html > >> - > >> List info/subscribe/unsubscribe? See > >> http://www.freeradius.org/list/users.html > >> > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >