I’m sorry I didn’t search far enough into the mail archive of freeradius-users.

I have search a bit more and find my answer in a subject called:

Assigning VLAN based on LDAP attribute”

 

Romain Mercier


De : freeradius-users-bounces+romain.mercier=univ-angers.fr@lists.freeradius.org [mailto:freeradius-users-bounces+romain.mercier=univ-angers.fr@lists.freeradius.org] De la part de Romain Mercier
Envoyé : mercredi 14 février 2007 09:55
À : 'FreeRadius users mailing list'
Objet : FreeRadius + OpenLDAP + VLAN

 

Hi,

 

I want to assign users to a certain VLAN depending on an attribute stocked in LDAP.

At the time, I use files module to do that and it works in a first test but don’t take care about the attribute.

 

How can I use the attribute I create?

 

In the ldap.attrmap file I add this line:

checkItem         Ldap-Group       auaStatut

 

In the users file I add these lines:

DEFAULT         Ldap-Group == “xxxx”

            Tunnel-Type = VLAN,

            Tunnel-Medium-Type = IEEE-802,

            Tunnel-Private-Group-Id = 1,

            Fall-Through = 0

 

Does anybody have an idea?

 

Romain Mercier