-----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+m_zouhairy=skno.by@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, February 2, 2018 4:46 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: cisco phones On Feb 2, 2018, at 7:49 AM, Vacheslav <m_zouhairy@skno.by> wrote:
What I want is to make it work so I tried replacing the reply attributes with Tunnel-Type:1 := VLAN Tunnel-Medium-Type:1 := 802 Tunnel-Private-Group-Id:1 := VOICE-LAN
But the phone gets authenticated on the data vlan (24).
Does the phone know what "VOICE-LAN" is? The command: switchport voice vlan 23 Is configured. Dot1x network authorization, which is needed to place in the voice vlan is configured.
Then I replaced the last one with :
Tunnel-Private-Group-Id:1 := 23 as a reply attribute And it didn't change anything as a result.
If the debug log shows those attributes being sent back to the NAS, then the server is configured correctly. Blame the NAS for not doing what the server says to do. How can I blame cisco for not accepting cisco attributes?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html