Thank you for replying, we're getting closer to the resolution: tried Cisco-AVPair:="device-traffic-class=voice" Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-ID := 23 Got: Auth: (175) Invalid user (sql: Failed to create the pair: Invalid character ' ' in attribute): [ip phone name/<via Auth-Type = eap>] (from client Switch port 50145 cli mac) Tue Jan 30 15:14:37 2018 : Auth: (175) Login incorrect (sql: Failed to create the pair: Invalid character ' ' in attribute): [ip phone name/<via Auth-Type = eap>] (from client Switch port 50145 cli mac) Then I tried: Cisco-AVPair:=device-traffic-class=voice Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-ID := 1:VOICE-LAN With same error. I also tried: Cisco-AVPair:=device-traffic-class=voice Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-ID := 23 What does this mean? -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+m_zouhairy=skno.by@lists.freeradius.org] On Behalf Of Matthew Newton Sent: Tuesday, January 30, 2018 3:05 PM To: freeradius-users@lists.freeradius.org Subject: Re: cisco phones On Tue, 2018-01-30 at 14:07 +0300, Vacheslav wrote:
cisco-avpair="device-traffic-class=voice" Tunnel-Type=1:VLAN Tunnel-Medium-Type=1:802 Tunnel-Private-Group-ID=1:VOICE-LAN
So I added them as check attributes, with := but I got: Auth: (163) Invalid user (sql: Error parsing value: Unknown or invalid value "1:VLAN" for attribute Tunnel-Type):
Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-ID := xxx where xxx is the VLAN number you want the device put in to. -- Matthew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html