Tag and Untag a port in several VLAN
Hi there, I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with sql backend. To untag a port of the switch in a VLAN works well. But in some case i need to tag a port in several VLAN. In the wiki [1] it looks possible. By following indicated in the wiki i inserted the followind data in my sql backend : insert into radgroupreply(groupname,attribute,op,value) values ('AP_test','Egress-VLANID',':=','0x320007'); insert into radgroupreply(groupname,attribute,op,value) values ('AP_test','Egress-VLANID',':=','0x32000102'); But when i plug the equipment radius give this debug : [sql1] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'test' ORDER BY id rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute Egress-VLANID What am i missing or misunderstanding ? Help is welcome. Best regards, [1] http://wiki.freeradius.org/HP -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com <http://www.kezia.com/> *Tel: +33 (0) 467 992 986* Kezia Group
Fabien COMBERNOUS wrote:
I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with sql backend. ... But when i plug the equipment radius give this debug : [sql1] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'test' ORDER BY id rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute Egress-VLANID
What am i missing or misunderstanding ?
The hex value isn't accepted in 2.1.3. You'll need to run 2.1.6 or later. Or, change the hex number to a decimal number. Alan DeKok.
Alan DeKok wrote:
Fabien COMBERNOUS wrote:
I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with sql backend.
...
But when i plug the equipment radius give this debug : [sql1] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'test' ORDER BY id rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute Egress-VLANID
What am i missing or misunderstanding ?
The hex value isn't accepted in 2.1.3. You'll need to run 2.1.6 or later.
Or, change the hex number to a decimal number.
Thank you for your answer. I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ? Best regards, -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com <http://www.kezia.com/> *Tel: +33 (0) 467 992 986* Kezia Group
On 2010/08/03 01:51 PM, Fabien COMBERNOUS wrote:
Thank you for your answer. I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ?
Just convert 0x320007 to decimal?? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782
On 2010/08/03 01:51 PM, Fabien COMBERNOUS wrote:
Thank you for your answer. I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ?
Just convert 0x320007 to decimal??
No. Just a correct example in hexa to untag in vlan 7. I'll translate in decimal. Thank you for your help.
Alan DeKok wrote:
Fabien COMBERNOUS wrote:
I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with sql backend.
...
But when i plug the equipment radius give this debug : [sql1] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'test' ORDER BY id rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute Egress-VLANID
What am i missing or misunderstanding ?
The hex value isn't accepted in 2.1.3. You'll need to run 2.1.6 or later.
Or, change the hex number to a decimal number.
So i used the other possibility with Egress-VLAN-Name instead of Egress-VLANID. It is easier to understand the meaning of the value and it works with my version of FreeRadius. Thank you for your help. -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com <http://www.kezia.com/> *Tel: +33 (0) 467 992 986* Kezia Group
Fabien COMBERNOUS wrote: [...] > So i used the other possibility with Egress-VLAN-Name instead of > Egress-VLANID. > It is easier to understand the meaning of the value and it works with > my version of FreeRadius. About the dynamic vlan assignment i use the two methods explained in [1] : - some ports are single untaged vlan : all works fine. - some ports are multiple tagged and untagged vlan : the ports of the switch looks tagged and untagged as expected but the packets are not rooted as expected. The input packets are not transmited to the output expected. I tagged and untagged manually some others ports similarly to my sql backend and all packets are well routed. In the single untagged vlan method, 3 parameters are needed. In the multiple tagged/untagged vlan method i used only several times Egress-VLAN-Name. Is it necessary to use an other parameter in the sql backend other than Egress-VLAN-Name ? [1] http://wiki.freeradius.org/HP > > Thank you for your help. > > -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com <http://www.kezia.com/> *Tel: +33 (0) 467 992 986* Kezia Group
On Aug 4, 2010, at 1:01 AM, Fabien COMBERNOUS wrote: > Fabien COMBERNOUS wrote: > > [...] >> So i used the other possibility with Egress-VLAN-Name instead of Egress-VLANID. >> It is easier to understand the meaning of the value and it works with my version of FreeRadius. > About the dynamic vlan assignment i use the two methods explained in [1] : > - some ports are single untaged vlan : all works fine. > - some ports are multiple tagged and untagged vlan : the ports of the switch looks tagged and untagged as expected but the packets are not rooted as expected. The input packets are not transmited to the output expected. I tagged and untagged manually some others ports similarly to my sql backend and all packets are well routed. > > In the single untagged vlan method, 3 parameters are needed. In the multiple tagged/untagged vlan method i used only several times Egress-VLAN-Name. Is it necessary to use an other parameter in the sql backend other than Egress-VLAN-Name ? To answer your question no, only a single attribute is required. This isn't a FreeRADIUS question, please contact me off list at arran.cudbard-bell@hp.com with a statement of what you're trying to accomplish and the model numbers and firmware revisions of your switches. Regards, Arran > > > [1] http://wiki.freeradius.org/HP >> >> Thank you for your help. >> >> > > > -- > *Fabien COMBERNOUS* > /unix system engineer/ > www.kezia.com <http://www.kezia.com/> > *Tel: +33 (0) 467 992 986* > Kezia Group > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
Alan DeKok -
Arran Cudbard-Bell -
Fabien COMBERNOUS -
fcombernous＠kezia.com
-
Johan Meiring