Freeradius with Cisco Wireless Controller
Hi, I use freeradius with cisco access point and vlans assignment, work fine but now I try to use Cisco Wireless Controller and the vlan assignment dont work. Can you help me? I send the logs: Many thanks! Log without acces points and wireless controller: .... server inner-tunnel { +- entering group authorize {...} ++[preprocess] returns ok ++? if (!Huntgroup-Name) ? Evaluating !(Huntgroup-Name) -> TRUE ++? if (!Huntgroup-Name) -> TRUE ++- entering if (!Huntgroup-Name) {...} +++[reply] returns ok ++- if (!Huntgroup-Name) returns ok ++? if (Huntgroup-Name == "list") (Attribute Huntgroup-Name was not found) .... dont check groups. Log with acces points only: server inner-tunnel { +- entering group authorize {...} ++[preprocess] returns ok ++? if (!Huntgroup-Name) ? Evaluating !(Huntgroup-Name) -> FALSE ++? if (!Huntgroup-Name) -> FALSE ++? if (Huntgroup-Name == "list") ? Evaluating (Huntgroup-Name == "list") -> TRUE ++? if (Huntgroup-Name == "list") -> TRUE ++- entering if (Huntgroup-Name == "list") {...} +++? if (Ldap-Group == "WIFI-Direccion") rlm_ldap: Entering ldap_groupcmp() .... In this case check each group The config is the same. freeradius work with cisco wireless controller? Thanks!
On 18/04/12 16:24, Martin Silvero wrote:
Hi,
I use freeradius with cisco access point and vlans assignment, work fine but now I try to use Cisco Wireless Controller and the vlan assignment dont work. Can you help me?
If you are sending the VLAN attributes, then FreeRADIUS is working. Check the attributes are being sent. If not, configure FreeRADIUS to send them. If they are being sent, look at the wireless controller.
I send the logs:
These logs are useless. Please send a full debug, with "radiusd -X" as described on the list daily. However, before you send it, please READ it. The debug will probably show you the problem.
freeradius work with cisco wireless controller?
Yes.
On Wed, Apr 18, 2012 at 12:24:46PM -0300, Martin Silvero wrote:
I use freeradius with cisco access point and vlans assignment, work fine but now I try to use Cisco Wireless Controller and the vlan assignment dont work.
Make sure your Access-Accept packet has the following AV pairs: Tunnel-Type := 13 Tunnel-Medium-Type := 6 Tunnel-Private-Group-Id := <VLAN ID> Ensure your WLAN on the controller has AAA override, e.g. do config wlan aaa-override enable <Wireless LAN ID> or configure it in the interface. As others have said, radiusd -X will tell you the former. Only you can check the latter. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (3)
-
Martin Silvero -
Matthew Newton -
Phil Mayers