Matthew I have been watching this thread and we do a similar thing except most of our sites use brocade device and there were much easier to deal with. We do have a site that has cisco switches and am wondering when this gets resolved if you might share the final output (attributes and relevant switch config) for reference. We have quickly experimented with the devices and although we never got any errors the devices never seem to do the assignments. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+jmartin=emcc.edu@lists.freeradius.org] On Behalf Of Vacheslav Sent: Tuesday, January 30, 2018 7:26 AM To: 'FreeRadius users mailing list' <freeradius-users@lists.freeradius.org> Subject: RE: cisco phones Thank you for replying, we're getting closer to the resolution: tried Cisco-AVPair:="device-traffic-class=voice" Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-ID := 23 Got: Auth: (175) Invalid user (sql: Failed to create the pair: Invalid character ' ' in attribute): [ip phone name/<via Auth-Type = eap>] (from client Switch port 50145 cli mac) Tue Jan 30 15:14:37 2018 : Auth: (175) Login incorrect (sql: Failed to create the pair: Invalid character ' ' in attribute): [ip phone name/<via Auth-Type = eap>] (from client Switch port 50145 cli mac) Then I tried: Cisco-AVPair:=device-traffic-class=voice Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-ID := 1:VOICE-LAN With same error. I also tried: Cisco-AVPair:=device-traffic-class=voice Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-ID := 23 What does this mean? -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+m_zouhairy=skno.by@lists.freeradius.org] On Behalf Of Matthew Newton Sent: Tuesday, January 30, 2018 3:05 PM To: freeradius-users@lists.freeradius.org Subject: Re: cisco phones On Tue, 2018-01-30 at 14:07 +0300, Vacheslav wrote:
cisco-avpair="device-traffic-class=voice" Tunnel-Type=1:VLAN Tunnel-Medium-Type=1:802 Tunnel-Private-Group-ID=1:VOICE-LAN
So I added them as check attributes, with := but I got: Auth: (163) Invalid user (sql: Error parsing value: Unknown or invalid value "1:VLAN" for attribute Tunnel-Type):
Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-ID := xxx where xxx is the VLAN number you want the device put in to. -- Matthew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html