hello, to sum up my case. 1) radius authenticate user in users file 2) my client is windows xp wired 3) successfull vlan is set to 100 Tunnel-Type = VLAN, Tunnel-Medium-type = IEEE-802, Tunnel-Private-Group-ID = 100 so, if auth successed the switch assign to vlan100 , it works. (fa0/24) but if auth fails, i'd like to send him to vlan 120 so in my fa0/24 i did: interface FastEthernet0/24 switchport access vlan 100 switchport mode access dot1x pae authenticator dot1x port-control auto dot1x auth-fail vlan 120 => here supposed to send it to vlan 120 spanning-tree portfast BUT, in case of auth failed, it doesn't work Anybody can help me?
Hi,
interface FastEthernet0/24 switchport access vlan 100 switchport mode access dot1x pae authenticator dot1x port-control auto dot1x auth-fail vlan 120 => here supposed to send it to vlan 120 spanning-tree portfast
looking okay...do you need to set these global values too? dot1x system-auth-control dot1x guest-vlan supplicant PS this really is no longer a FreeRADIUS issue per se - its now very vendor specific - you should be bugging the appropriate people or list that deals with your kit :-) alan
Oh my god you are GOD!!! that works so fine. clients windows are well connected and if auth fails, they are sent to vlan guest!!! but with ubuntu ( networ-manager), i must restart network manager several time to make it work, i noticed that network manager has somme issues to keep password in 802.1x :-( . thanks so much!!!! 2010/3/4 Alan Buxey <A.L.M.Buxey@lboro.ac.uk>
Hi,
interface FastEthernet0/24 switchport access vlan 100 switchport mode access dot1x pae authenticator dot1x port-control auto dot1x auth-fail vlan 120 => here supposed to send it to vlan 120 spanning-tree portfast
looking okay...do you need to set these global values too?
dot1x system-auth-control dot1x guest-vlan supplicant
PS this really is no longer a FreeRADIUS issue per se - its now very vendor specific - you should be bugging the appropriate people or list that deals with your kit :-)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan Buxey -
omega bk