Hi all, Is it possible to include a VLAN tag in the reply, so that client is assigned to the appropirate VLAN based on it's auth group ( so, if USER_A is member of GROUP_A, than it's assigned to VLAN_A) Is this possible? Or should be done elsewhere, than the radius? Thanks, Tamas
Dajka Tamás wrote:
Hi all,
Is it possible to include a VLAN tag in the reply, so that client is assigned to the appropirate VLAN based on it's auth group ( so, if USER_A is member of GROUP_A, than it's assigned to VLAN_A)
it seems to be "vendor specific"...For Cisco Tunnel-Type (064): VLAN Tunnel-Medium-Type (065): 802 Tunnel-Private-Group-ID (081): { nom du VLAN }
Is this possible? Or should be done elsewhere, than the radius?
You can map a private attrib (LDAP vlan entry for ex) to one of these "vendor specific" in your reply. Rgds Paul
Thanks,
Tamas
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- ============================ Paul TAVERNIER Equipe Reseaux-Securite Division Informatique Rectorat de ROUEN Tel: 02.32.08.94.18 Fax: 02.32.08.94.12 Mob: 06.25.45.84.10 "Je suis accablé de tant de riens, si surchargé de billevesées" (Voltaire) ============================
Dajka Tamás wrote:
Is it possible to include a VLAN tag in the reply, so that client is assigned to the appropirate VLAN based on it's auth group ( so, if USER_A is member of GROUP_A, than it's assigned to VLAN_A)
Yes. See your NAS documentation for documentation about what it needs to see in the RADIUS response. Alan DeKok.
some NAS will drop the access-accept or remain port close if the vlan provide from radius doesn't match the swith's vlan. eric On Tue, Nov 4, 2008 at 8:59 AM, Alan DeKok <aland@deployingradius.com>wrote:
Dajka Tamás wrote:
Is it possible to include a VLAN tag in the reply, so that client is assigned to the appropirate VLAN based on it's auth group ( so, if USER_A is member of GROUP_A, than it's assigned to VLAN_A)
Yes. See your NAS documentation for documentation about what it needs to see in the RADIUS response.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Dajka Tamás -
Eric Ying -
Paul TAVERNIER