Sorry Alan, I did not intend to be impolite or offend. I included the config files just in case anyone noticed anything 'odd'. and will refrain. i've redone everything, and have finally gotten vmps responses. to test, i have used the check_vmps package from nagios and it appears to work at least from what I am seeing in the freeradius respones. Has anybody noticed any odd behavior with freeradius when a mac address have letters in it? It is like freeradius does not parse these macs correctly to assign it to the correct vlan. Example: mac2vlan file: 00:01:02:03:04:05,VLAN1 03:04:05:06:07:08,VLAN2 03:04:05:06:07:18,VLAN3 03:04:05:06:A7:18,VLAN4 03:04:05:06:B7:18,VLAN4 03:04:05:06:A8:18,VLAN4 03:04:05:06:A9:18,VLAN5 unix# ./check_vmps -s 192.168.2.25 -m 00:01:02:03:04:05 VMPS OK - Vlan: VLAN1, MAC Address: 000102030405, Status: ALLOW unix# unix# ./check_vmps -s 192.168.2.25 -m 03:04:05:06:07:08 VMPS OK - Vlan: VLAN2, MAC Address: 030405060708, Status: ALLOW unix# unix# ./check_vmps -s 192.168.2.25 -m 03:04:05:06:07:18 VMPS OK - Vlan: VLAN3, MAC Address: 030405060718, Status: ALLOW unix# unix# ./check_vmps -s 192.168.2.25 -m 03:04:05:06:A7:18 VMPS OK - Vlan: please_use_real_vlan_here, MAC Address: 03040506a718, Status: ALLOW unix# unix# ./check_vmps -s 192.168.2.25 -m 03:04:05:06:A9:18 VMPS OK - Vlan: please_use_real_vlan_here, MAC Address: 03040506a918, Status: ALLOW unix# unix# ./check_vmps -s 192.168.2.25 -m 03:04:05:06:A8:18 VMPS OK - Vlan: please_use_real_vlan_here, MAC Address: 03040506a818, Status: ALLOW unix# unix# ./check_vmps -s 192.168.2.25 -m 03:04:05:06:07:18 VMPS OK - Vlan: VLAN3, MAC Address: 030405060718, Status: ALLOW unix# unix# ./check_vmps -s 192.168.2.25 -m 00:01:02:03:04:05 VMPS OK - Vlan: VLAN1, MAC Address: 000102030405, Status: ALLOW unix# debug information: Ready to process requests VMPS-Packet-Type = VMPS-Join-Request VMPS-Error-Code = VMPS-No-Error VMPS-Sequence-Number = 4660 VMPS-Client-IP-Address = 127.0.0.1 VMPS-Port-Name = 'Fa0/1' VMPS-VLAN-Name = '' VMPS-Domain-Name = '' VMPS-Unknown = 0x00 VMPS-MAC = 03:04:05:06:07:18 (2) Received Access-Request Id 4660 from 192.168.2.5:50874 to 192.168.2.25:1589 length 60 (2) VMPS-Packet-Type = VMPS-Join-Request (2) VMPS-Error-Code = VMPS-No-Error (2) VMPS-Sequence-Number = 4660 (2) VMPS-Client-IP-Address = 127.0.0.1 (2) VMPS-Port-Name = 'Fa0/1' (2) VMPS-VLAN-Name = '' (2) VMPS-Domain-Name = '' (2) VMPS-Unknown = 0x00 (2) VMPS-MAC = 03:04:05:06:07:18 Doing VMPS (2) vmps { (2) if (!&VMPS-Mac) { (2) if (!&VMPS-Mac) -> FALSE (2) mac2vlan: Added VMPS-VLAN-Name: 'VLAN3' to reply_items (2) [mac2vlan] = ok (2) update reply { (2) &VMPS-Packet-Type = VMPS-Join-Response (2) &VMPS-Cookie = &VMPS-MAC -> 03:04:05:06:07:18 (2) &VMPS-VLAN-Name = "please_use_real_vlan_here" (2) } # update reply = noop (2) if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){ (2) if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE (2) } # vmps = ok Done VMPS (2) vmps { (2) if (!&VMPS-Mac) { (2) if (!&VMPS-Mac) -> FALSE (2) mac2vlan: Added VMPS-VLAN-Name: 'VLAN3' to reply_items (2) [mac2vlan] = ok (2) update reply { (2) &VMPS-Packet-Type = VMPS-Join-Response (2) &VMPS-Cookie = &VMPS-MAC -> 03:04:05:06:07:18 (2) &VMPS-VLAN-Name = "please_use_real_vlan_here" (2) } # update reply = noop (2) if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){ (2) if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE (2) } # vmps = ok (2) Sent Access-Accept Id 4660 from 192.168.2.25:1589 to 192.168.2.5:50874 length 0 VMPS-VLAN-Name = 'VLAN3' VMPS-Cookie = 03:04:05:06:07:18 (2) Finished request Waking up in 4.9 seconds. (2) <done>: Cleaning up request packet ID 4660 with timestamp +40 Ready to process requests VMPS-Packet-Type = VMPS-Join-Request VMPS-Error-Code = VMPS-No-Error VMPS-Sequence-Number = 4660 VMPS-Client-IP-Address = 127.0.0.1 VMPS-Port-Name = 'Fa0/1' VMPS-VLAN-Name = '' VMPS-Domain-Name = '' VMPS-Unknown = 0x00 VMPS-MAC = 00:01:02:03:04:05 (3) Received Access-Request Id 4660 from 192.168.2.5:50875 to 192.168.2.25:1589 length 60 (3) VMPS-Packet-Type = VMPS-Join-Request (3) VMPS-Error-Code = VMPS-No-Error (3) VMPS-Sequence-Number = 4660 (3) VMPS-Client-IP-Address = 127.0.0.1 (3) VMPS-Port-Name = 'Fa0/1' (3) VMPS-VLAN-Name = '' (3) VMPS-Domain-Name = '' (3) VMPS-Unknown = 0x00 (3) VMPS-MAC = 00:01:02:03:04:05 Doing VMPS (3) vmps { (3) if (!&VMPS-Mac) { (3) if (!&VMPS-Mac) -> FALSE (3) mac2vlan: Added VMPS-VLAN-Name: 'VLAN1' to reply_items (3) [mac2vlan] = ok (3) update reply { (3) &VMPS-Packet-Type = VMPS-Join-Response (3) &VMPS-Cookie = &VMPS-MAC -> 00:01:02:03:04:05 (3) &VMPS-VLAN-Name = "please_use_real_vlan_here" (3) } # update reply = noop (3) if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){ (3) if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE (3) } # vmps = ok Done VMPS (3) vmps { (3) if (!&VMPS-Mac) { (3) if (!&VMPS-Mac) -> FALSE (3) mac2vlan: Added VMPS-VLAN-Name: 'VLAN1' to reply_items (3) [mac2vlan] = ok (3) update reply { (3) &VMPS-Packet-Type = VMPS-Join-Response (3) &VMPS-Cookie = &VMPS-MAC -> 00:01:02:03:04:05 (3) &VMPS-VLAN-Name = "please_use_real_vlan_here" (3) } # update reply = noop (3) if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){ (3) if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE (3) } # vmps = ok (3) Sent Access-Accept Id 4660 from 192.168.2.25:1589 to 192.168.2.5:50875 length 0 VMPS-VLAN-Name = 'VLAN1' VMPS-Cookie = 00:01:02:03:04:05 (3) Finished request Waking up in 4.9 seconds. (3) <done>: Cleaning up request packet ID 4660 with timestamp +221 Ready to process requests thanks again, -- Manuel
On Jun 16, 2015, at 8:29 PM, Manny <mvarroyo3+freeradius@gmail.com> wrote:
I did not intend to be impolite or offend. I included the config files just in case anyone noticed anything 'odd'. and will refrain.
The issue for me is that there is a *huge* amount of documentation which says what people should post to the list: the debug output. Yet for almost half of the messages here, people post something *else*.
i've redone everything, and have finally gotten vmps responses. to test, i have used the check_vmps package from nagios and it appears to work at least from what I am seeing in the freeradius respones. Has anybody noticed any odd behavior with freeradius when a mac address have letters in it?
Check for uppercase / lowercase. The "mac2vlan" matching is done based on string equality. Ensure that the case in that file is the same as what's printed by the server in debug mode. Alan DeKok.
I can see what you are saying about including debug outout. In my case it was a host configuration problem, old iptables rule was blocking coms, and so there was nothing communicating in the debug which was confusing to me at first. Service seemed to take all my configurations and startup fine. Then when i started digging in, I found my answer. Oh and about the MAC mapping,Yep, that was it,The comparisons are all lower case so, the mac's in the file needed to be in lowercase as well. (2) vmps { (2) if (!&VMPS-Mac) { (2) if (!&VMPS-Mac) -> FALSE (2) mac2vlan: Added VMPS-VLAN-Name: 'Printers' to reply_items (2) [mac2vlan] = ok (2) update reply { (2) &VMPS-Packet-Type = VMPS-Join-Response (2) &VMPS-Cookie = &VMPS-MAC -> 00:01:a6:5b:a7:b1 (2) &VMPS-VLAN-Name = "printer" (2) } # update reply = noop Thanks for your help, -- Manny On Wed, Jun 17, 2015 at 8:00 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 16, 2015, at 8:29 PM, Manny <mvarroyo3+freeradius@gmail.com> wrote:
I did not intend to be impolite or offend. I included the config files just in case anyone noticed anything 'odd'. and will refrain.
The issue for me is that there is a *huge* amount of documentation which says what people should post to the list: the debug output. Yet for almost half of the messages here, people post something *else*.
i've redone everything, and have finally gotten vmps responses. to test, i have used the check_vmps package from nagios and it appears to work at least from what I am seeing in the freeradius respones. Has anybody noticed any odd behavior with freeradius when a mac address have letters in it?
Check for uppercase / lowercase. The "mac2vlan" matching is done based on string equality. Ensure that the case in that file is the same as what's printed by the server in debug mode.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Manny