I'm trying to configure dynamics wlans using Cisco WLC + freeradius, but I have some issues. I modified the ldap.attrmap, including the attributes: replyItem Tunnel-Type radiusTunnelType replyItem Tunnel-Medium-Type radiusTunnelMediumType replyItem Tunnel-Private-Group-Id radiusTunnelPrivateGroupId However, when a try to connect, the freeradius replies a "0" (ex: Tunnel-Private-Group-Id:0) after the attribute, as you can see below: Sending Access-Accept of id 146 to 10.1.0.161 port 32768 Tunnel-Private-Group-Id:0 = "85" Tunnel-Medium-Type:0 = 802 Tunnel-Type:0 = VLAN Filter-Id = "Enterasys:version=1:policy=Aluno" MS-MPPE-Recv-Key = 0xcfcf3c464de734110cda4f22dc1ed36c2e7e5c629861059036e61fb5e98d104b MS-MPPE-Send-Key = 0x8115583c24b0c533eca2417e1a82e092bd908417dee2cecdeb3b89d857f4634f EAP-Message = 0x030c0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "leofell" I think it may the problem and I'd like to know why it happens.. Thanks! -- Leonardo Fell Setor de Redes - NTI Centro Universitário UNIVATES Fundação Vale do Taquari de Educação e Desenvolvimento Social - FUVATES Telefone: (51)37147000 Ramal 5809 www.univates.br
Hi,
However, when a try to connect, the freeradius replies a "0" (ex: Tunnel-Private-Group-Id:0) after the attribute, as you can see below:
Sending Access-Accept of id 146 to 10.1.0.161 port 32768 Tunnel-Private-Group-Id:0 = "85" Tunnel-Medium-Type:0 = 802 Tunnel-Type:0 = VLAN Filter-Id = "Enterasys:version=1:policy=Aluno" MS-MPPE-Recv-Key = 0xcfcf3c464de734110cda4f22dc1ed36c2e7e5c629861059036e61fb5e98d104b MS-MPPE-Send-Key = 0x8115583c24b0c533eca2417e1a82e092bd908417dee2cecdeb3b89d857f4634f EAP-Message = 0x030c0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "leofell"
I think it may the problem and I'd like to know why it happens..
nope. no problem eg Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "666" its perfectly fine to have the :0 but as you can see from my example log output...i define the Medium-Type properly - change yours to match and it might work for you :-) alan
Thanks you for your attention.. I changed the attribute but unfortunately it didn't work anyway..: Sending Access-Accept of id 123 to 10.1.0.161 port 32769 Tunnel-Private-Group-Id:0 = "85" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN Filter-Id = "Enterasys:version=1:policy=Aluno" MS-MPPE-Recv-Key = 0xae13f576b423a40084248c8977618104e42dafb4153e556f1e6b06da85ab7d46 MS-MPPE-Send-Key = 0x40e5448be214dfbf2fb5a16cb04fde4b70ee543850ba4a8c88fbf6e59f4a39aa EAP-Message = 0x030c0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "leofell" I don't know what is the problem, I have an interface vlan ID 85 on the WLC, I marked "AAA overide" on the wlan configuration.. Do you know what anymore else I could do ? Cheers! -- Leonardo Fell ----- Mensagem original ----- De: "Alan Buxey" <A.L.M.Buxey@lboro.ac.uk> Para: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Enviadas: Segunda-feira, 19 de Dezembro de 2011 14:08:39 Assunto: Re: Cisco WLC + freeradius Hi,
However, when a try to connect, the freeradius replies a "0" (ex: Tunnel-Private-Group-Id:0) after the attribute, as you can see below:
Sending Access-Accept of id 146 to 10.1.0.161 port 32768 Tunnel-Private-Group-Id:0 = "85" Tunnel-Medium-Type:0 = 802 Tunnel-Type:0 = VLAN Filter-Id = "Enterasys:version=1:policy=Aluno" MS-MPPE-Recv-Key = 0xcfcf3c464de734110cda4f22dc1ed36c2e7e5c629861059036e61fb5e98d104b MS-MPPE-Send-Key = 0x8115583c24b0c533eca2417e1a82e092bd908417dee2cecdeb3b89d857f4634f EAP-Message = 0x030c0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "leofell"
I think it may the problem and I'd like to know why it happens..
nope. no problem eg Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "666" its perfectly fine to have the :0 but as you can see from my example log output...i define the Medium-Type properly - change yours to match and it might work for you :-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I changed the attribute but unfortunately it didn't work anyway..: Sending Access-Accept of id 123 to 10.1.0.161 port 32769 Tunnel-Private-Group-Id:0 = "85" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN
hmm, one is quoted, the others arent. are you doing eg $RAD_REPLY{'Tunnel-Medium-Type'} = "IEEE-802"; $RAD_REPLY{'Tunnel-Type'} = "VLAN"; $RAD_REPLY{'Tunnel-Private-Group-Id'} = "85"; ?? alan
Thanks man, I went into the network configuration and I found some internal issues.. it's working now.. Cheers!! -- Leonardo Fell ----- Mensagem original ----- De: "Alan Buxey" <A.L.M.Buxey@lboro.ac.uk> Para: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Enviadas: Segunda-feira, 19 de Dezembro de 2011 15:10:15 Assunto: Re: Cisco WLC + freeradius Hi,
I changed the attribute but unfortunately it didn't work anyway..: Sending Access-Accept of id 123 to 10.1.0.161 port 32769 Tunnel-Private-Group-Id:0 = "85" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN
hmm, one is quoted, the others arent. are you doing eg $RAD_REPLY{'Tunnel-Medium-Type'} = "IEEE-802"; $RAD_REPLY{'Tunnel-Type'} = "VLAN"; $RAD_REPLY{'Tunnel-Private-Group-Id'} = "85"; ?? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Could you share what you did to get this working? I've been having a rather nasty time of it... ----- Original Message ----- From: "LEONARDO FELL" <leofell@univates.br> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, December 19, 2011 9:45:51 AM Subject: Re: Cisco WLC + freeradius Thanks man, I went into the network configuration and I found some internal issues.. it's working now.. Cheers!! -- Leonardo Fell ----- Mensagem original ----- De: "Alan Buxey" <A.L.M.Buxey@lboro.ac.uk> Para: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Enviadas: Segunda-feira, 19 de Dezembro de 2011 15:10:15 Assunto: Re: Cisco WLC + freeradius Hi,
I changed the attribute but unfortunately it didn't work anyway..: Sending Access-Accept of id 123 to 10.1.0.161 port 32769 Tunnel-Private-Group-Id:0 = "85" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN
hmm, one is quoted, the others arent. are you doing eg $RAD_REPLY{'Tunnel-Medium-Type'} = "IEEE-802"; $RAD_REPLY{'Tunnel-Type'} = "VLAN"; $RAD_REPLY{'Tunnel-Private-Group-Id'} = "85"; ?? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan Buxey -
Jefferson Davis -
LEONARDO FELL