On Feb 2, 2018, at 3:16 AM, Vacheslav <m_zouhairy@skno.by> wrote:
I deleted the attributes one at a time and test and it turns out the Tunnel-Type:=VLAN was that menace. I first added it again, this time as check attribute, without using the auto saved entry in the browser, and the login was ok.
That's weird. Tunnel-Type is a standard attribute.
You got happy ahead of time. Without the attribute it authenticated on the data vlan. With the attribute, the switch reported the phone as dropped. Then I added the mentioned attribute as a reply keeping it as check also, and again the login was ok but the switch dropped the packets. Then I deleted the mentioned attribute from checking and no change. I final tried putting it 1:VLAN and 23:VLAN but that just makes freeradius spout:
"1" is the tag number. It's used for grouping multiple attributes. It is *not* a VLAN number. If you want to use tags, you should use the same tag for all tagged attributes... Tunnel-Type:1 = VLAN Tunnel-Foo:1 = value ... Alan DeKok.