Ok. That’s clear now. But what happened, if you have different Rules? For example: ntlm_auth, send reply with vlan id 8. For VoIP Devices send reply with vlan id 16 and so on I think in this case we need to work with perl, because the VoIP Devices are stored in a Database Or is it wrong? Thanks a lot Torsten On 14/10/15 21:06, "Freeradius-Users on behalf of Scott Armitage" <freeradius-users-bounces+torsten=wilms-ac.de@lists.freeradius.org on behalf of S.P.Armitage@lboro.ac.uk> wrote:
On 14 Oct 2015, at 17:50, Torsten Wilms <torsten@wilms-ac.de> wrote:
Hello @all
I use free radius version 3.0.10 and the ntlm_auth for authenticate users via 802.1x over the AD Now i wan’t to setup switches with dynamic VLAN configuration.
I tried to use in the authorize section unter default and inner-tunnel
How can i use update control if ntlm_auth was successful?
This kind of work is done in post-auth. In your inner tunnel add something like:
post-auth {
update reply { Tunnel-Private-Group-ID := 8 Tunnel-Type = VLAN Tunnel-Medium-Type = IEEE-802 Session-Timeout = 28800 Termination-Action = RADIUS-Request }
regards
Scott Armitage - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html