fast reauthentification EAP-TTLS and vlan assignment
Hello, I'm trying to use vlan assignment under EAP-TTLS authentification. It works. Furthermore, when reauth is needed by the Cisco AP (after 300 seconds), my supplicant NetworkManager under Fedora 9 tells fast reauthentification. At this point, Freeradius does not send again vlan attributes (TTLS cache is enabled) and the AP puts the user in default vlan. Is this an issue in Freeradius, Cisco AP, supplicant ? May I miss something .... Thanks -- Jérôme BERTHIER INRIA Bordeaux - Sud-Ouest Service des Moyens Informatiques 05 24 57 40 50
I'm trying to use vlan assignment under EAP-TTLS authentification. It works. Furthermore, when reauth is needed by the Cisco AP (after 300 seconds), my supplicant NetworkManager under Fedora 9 tells fast reauthentification.
It probably doesn't send the same username. But without the debug ... Ivan Kalik Kalik Informatika ISP
tnt@kalik.net a écrit :
I'm trying to use vlan assignment under EAP-TTLS authentification. It works. Furthermore, when reauth is needed by the Cisco AP (after 300 seconds), my supplicant NetworkManager under Fedora 9 tells fast reauthentification.
It probably doesn't send the same username. But without the debug ...
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
It was an issue on the Cisco AP. It's not possible to enable both mbssid and vlan assignment. When I tried, the NAS send an EAP Service type equal to Login-User when supplicant asked fast reauth. Now, I'm trying with a single ssid. The NAS (Cisco AP) sends an EAP Service type equal to Authenticate-Only and keeps the vlan setting when supplicant asks for reauth. Thanks -- Jérôme BERTHIER INRIA Bordeaux - Sud-Ouest Service des Moyens Informatiques 05 24 57 40 50
participants (2)
-
Jerome BERTHIER -
tnt＠kalik.net