yet
} # server inner-tunnel
[peap] Got tunneled reply code 2
Service-Type = Framed-User
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = 802
Tunnel-Private-Group-Id:0 = "120"
EAP-Message = 0x030b0004
Message-Authenticator = 0x00000000000000000000000000000000
User-Name = "linatest"
[peap] Got tunneled reply RADIUS code 2
Service-Type = Framed-User
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = 802
Tunnel-Private-Group-Id:0 = "120"
EAP-Message = 0x030b0004
Message-Authenticator = 0x00000000000000000000000000000000
User-Name = "linatest"
[peap] Tunneled authentication was successful.
[peap] SUCCESS
[peap] Saving tunneled attributes for later
means freeradius sent correctly VLAN attributes, but switch doesn't received them.
Any one can help me?
means vlan is not communicated between the
freeradius and switch, but we don't know why2010/3/4 omega bk <omegabk@gmail.com>
hello,
still with the same issue about vlan assignment.
so to sum up
In my users file:
############
doctor Cleartext-Password := "mypass"
cisco-avpair= "tunnel-type(#64)=VLAN(13)",
cisco-avpair= "tunnel-medium-type(#65) = 802 media(6)",
cisco-avpair= "tunnel-private-group-ID(#81) = 100",#######################
Session-Timeout = "28800",
Termination-Action = "RADIUS-Request"
in my switch
--------------------
aaa new-model
aaa authentication dot1x default group radius
aaa authorization network default group radius
dot1x system-auth-control
!
interface FastEthernet0/24 => for successful authentication ( client is wired there)
switchport access vlan 100
switchport mode access
dot1x pae authenticator
dot1x port-control auto
dot1x auth-fail vlan 120
spanning-tree portfast
interface FastEthernet0/22
switchport access vlan 120
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 120
switchport mode access
spanning-tree portfast
radius-server host x.x.x.x auth-port 1812 acct-port 1813 key miamiam
radius-server source-ports 1645-1646
radius-server retransmit 5
radius-server vsa send authentication
---------------------------
so the authentication for doctor is good in vlan 100, but if i change to cisco-avpair= "tunnel-private-group-ID(#81) = 120", i'm stuck to vlan 100.
Any noe can help me?
thanks2010/3/4 Alan DeKok <aland@deployingradius.com>
Jens Link wrote:It seems to be fine now.
> @Alan: I would document VMPS in some more detail in the wiki if my
> access would be working. ;-)
Alan DeKok.