dynamic assignment of VLANs from LDAP via freeradius to WLAN-Clients doesn't work properly
Hello, we have freeradius-2.1.8 running, with openldap-2.3.43 as backend. in ldap we have three attributes (radiusTunnelMediumType=IEEE-802, radiusTunnelType=VLAN, and radiusTunnelPrivateGroupId=[vlan-id]), freeradius maps the ldap-attributes to radius-attributes. We have three vlans, one for staff, one for students and one for guests on the WLAN. after assigning the 1st VLAN on our cisco aironet 1242 accesspoints to the SSID -> clicking Apply, assigning the 2nd VLAN -> click Apply, assigning the 3rd VLAN, click Apply it works fine. (I mean manual assigning VLANs using web-interface) after reboot of the accesspoint it doesn't work anymore. after assign all three VLANs again, one after the other, it works. has anybody an idea about what I'm doing wrong ? the command "aaa authorization network default group radius" from the Cisco-site I tried, but it didn't help further. Thanks for some help, Frank Meister
Meister, Frank wrote:
after assigning the 1st VLAN on our cisco aironet 1242 accesspoints to the SSID -> clicking Apply, assigning the 2nd VLAN -> click Apply, assigning the 3rd VLAN, click Apply it works fine. (I mean manual assigning VLANs using web-interface)
? This has nothing to do with RADIUS.
after reboot of the accesspoint it doesn't work anymore. after assign all three VLANs again, one after the other, it works.
This has nothing to do with RADIUS.
has anybody an idea about what I'm doing wrong ? the command "aaa authorization network default group radius" from the Cisco-site I tried, but it didn't help further.
I don't see why this is a question for this list. Alan DeKok.
Am Donnerstag, 27. Mai 2010 18:42:29 schrieb Meister, Frank:
Hello,
we have freeradius-2.1.8 running, with openldap-2.3.43 as backend. in ldap we have three attributes (radiusTunnelMediumType=IEEE-802, radiusTunnelType=VLAN, and radiusTunnelPrivateGroupId=[vlan-id]), freeradius maps the ldap-attributes to radius-attributes.
We have three vlans, one for staff, one for students and one for guests on the WLAN.
after assigning the 1st VLAN on our cisco aironet 1242 accesspoints to the SSID -> clicking Apply, assigning the 2nd VLAN -> click Apply, assigning the 3rd VLAN, click Apply it works fine. (I mean manual assigning VLANs using web-interface)
after reboot of the accesspoint it doesn't work anymore. after assign all three VLANs again, one after the other, it works.
Besides that this question doesn't have anything to do with this list, did you try: copy running-config startup-config ? Greetings, -- Dr. Michael Schwartzkopff MultiNET Services GmbH Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany Tel: +49 - 89 - 45 69 11 0 Fax: +49 - 89 - 45 69 11 21 mob: +49 - 174 - 343 28 75 mail: misch@multinet.de web: www.multinet.de Sitz der Gesellschaft: 85630 Grasbrunn Registergericht: Amtsgericht München HRB 114375 Geschäftsführer: Günter Jurgeneit, Hubert Martens --- PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B Skype: misch42
participants (3)
-
Alan DeKok -
Meister, Frank -
Michael Schwartzkopff