I got this Answer today about my mail and it's great Subject: Re: FreeRadius Novice problems Message-ID: <201211192148.49496.misch@schwartzkopff.org> Content-Type: text/plain; charset="utf-8"
Hello,
(...)
1. How do I create users that have a specific vlan attached to them (say user2 will always associate Vlan2 when connected), user1 is untagged so it's vlan1, user2 is attached to vlan2 and so on and so on.
Normally your assign the VLAN with the attributes Tunnel-Type = "VLAN", Tunnel-Medium-Type = "IEEE-802", Tunnel-Private-Group-id = 2 This info will help me but I forgot to ask where do add this info? to /etc/freeradius/users ? what file do i need to edit to enable the Vlan support per username? The reason for my question is that when i added this info the users file the freeradius service could not start. Since this is a closed system that has no external access it's ok to share this info. alpha_lab@alpha-radius135:~$ sudo /etc/init.d/freeradius stop * Stopping FreeRADIUS daemon freeradius ...done. alpha_lab@alpha-radius135:~$ sudo nano /etc/freeradius/users radius1 Cleartext-Password := "radius1" Tunnel-Type = "VLAN" Tunnel-Medium-Type = "IEEE-802" Tunnel-Private-Group-Id = "1" # On no match, the user is denied access. alpha_lab@alpha-radius135:~$ alpha_lab@alpha-radius135:~$ alpha_lab@alpha-radius135:~$ alpha_lab@alpha-radius135:~$ *alpha_lab@alpha-radius135:~$ sudo /etc/init.d/freeradius start * Starting FreeRADIUS daemon freeradius ...fail! *alpha_lab@alpha-radius135:~$ alpha_lab@alpha-radius135:~$ when i remove the tunnel commands from the username i can restart the freeradius. Where do i error?? Thank you -- ____ Sometimes you just glow in the dark...