in fact,

i got my client wired with winxp and authentication works well in 802.1x
this client is connected directly in my switch trough vlan3

i would like dynamically assign a successfull authentication trough vlan2 and faillure authentication to vlan1

autthentication is based in users file (not mac auth)

thanks u


2010/3/3 Michael Schwartzkopff <misch@multinet.de>
Am Mittwoch, 3. März 2010 15:34:56 schrieb Jens Link:
> omega bk <omegabk@gmail.com> writes:
>
> Hi,
>
> > so i would like to redirect my winxp authenticated to VLAN1 and if not
> > authenticated , this client must be in vlan2
> >
> > i got a switch cisco
> >
> > so how to handla this with freeradius?
>
> Depends on how you do the authentication:
>
> Using certificates (either machine based or user based) 802.1x is the
> way to go if it's okay for you to use only the MAC address of the client
> (and you are using Cisco) VMPS might be worth a look.
>
> @Alan: I would document VMPS in some more detail in the wiki if my
> access would be working. ;-)
>
> Jens

Port authentication also works with mac addresses. You just have to pass back
on the correct attributes to the cisco. AND your IOS has to be able to
interprete them.

Greetings,

--
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany
Tel: +49 - 89 - 45 69 11 0
Fax: +49 - 89 - 45 69 11 21
mob: +49 - 174 - 343 28 75

mail: misch@multinet.de
web: www.multinet.de

Sitz der Gesellschaft: 85630 Grasbrunn
Registergericht: Amtsgericht München HRB 114375
Geschäftsführer: Günter Jurgeneit, Hubert Martens

---

PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
Skype: misch42

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html