Yes, your explanation is clear. But I think that you must affect a default vlan at each user. Because the filter of ldap module is the same for each request and for your example the filter works for ‘test2’ but for ‘test3’ the Cisco-AVpair attributes is vacuum and it’s normal if he don’t works.
 
Sorry, but I have not other solution.
 
 Ludovic Cailleau


Antonio Matera <antonio.matera@create-net.it> a écrit :

test2 Cisco-AVPair == "ssid=VLAN2", User-Password == "passwd2"
Tunnel-Medium-Type = IEEE-802,
Tunnel-Private-Group-Id = 2,
Tunnel-Type = VLAN

test3 User-Password == "passwd3"
Tunnel-Medium-Type = IEEE-802,
Tunnel-Private-Group-Id = 3,
Tunnel-Type = VLAN


test2 can connect to vlan2 only with ssid=VLAN2.
test3 can connect to vlan3 with any ssid.
This configuration works ed I want the same using only ldap module
without user file.


I hope that my explanation is clear.

Bye Antonio
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Ludovic Cailleau

Faites de Yahoo! votre page d'accueil sur le web pour retrouver directement vos services préférés : vérifiez vos nouveaux mails, lancez vos recherches et suivez l'actualité en temps réel. Cliquez ici.