Freeradius + Mysql + Enterasys management-access
Hello, I use FreeRADIUS version 2.1.3 with backend MySQL. It's working very good except this issue: When i try to use auth by Enterasys switch for management-access, Enterasys switch fails with login but FreeRADIUS says "Auth: Login OK:..." I searched on net and found that i have to add a Filter-Id with value Enterasys:version=1:mgmt=su But i could not find how to add this Filter-Id to mysql table. Can anyone help me please to solve this problem? Thanks a lot. -- King Regards Yucel
You have to use radreply table for that. For example: select * from radreply; +----+----------+-------------------+----+---------------+ | id | username | attribute | op | value | +----+----------+-------------------+----+---------------+ | 1 | test | Framed-IP-Address | = | 10.100.0.100 | | 2 | test | Framed-IP-Netmask | = | 255.255.255.0 | +----+----------+-------------------+----+---------------+ On Sat, Feb 5, 2011 at 10:22 PM, Yücel Türkistan <yucel.turkistan@gmail.com> wrote:
Hello, I use FreeRADIUS version 2.1.3 with backend MySQL. It's working very good except this issue: When i try to use auth by Enterasys switch for management-access, Enterasys switch fails with login but FreeRADIUS says "Auth: Login OK:..." I searched on net and found that i have to add a Filter-Id with value Enterasys:version=1:mgmt=su But i could not find how to add this Filter-Id to mysql table. Can anyone help me please to solve this problem? Thanks a lot. -- King Regards Yucel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks Ömer. I think that you understood my problem wrongly but i tried what you suggested. However it did not work. I had asked some people who uses Enterasys switches and they confirmed that i have to use Filter-Id but that guys dont know how it can be done under freeradius/unix. So i'm still in trouble with the issue. 2011/2/5 Omer Faruk SEN <omerfsen@gmail.com>
You have to use radreply table for that. For example:
select * from radreply; +----+----------+-------------------+----+---------------+ | id | username | attribute | op | value | +----+----------+-------------------+----+---------------+ | 1 | test | Framed-IP-Address | = | 10.100.0.100 | | 2 | test | Framed-IP-Netmask | = | 255.255.255.0 | +----+----------+-------------------+----+---------------+
On Sat, Feb 5, 2011 at 10:22 PM, Yücel Türkistan <yucel.turkistan@gmail.com> wrote:
Hello, I use FreeRADIUS version 2.1.3 with backend MySQL. It's working very good except this issue: When i try to use auth by Enterasys switch for management-access, Enterasys switch fails with login but FreeRADIUS says "Auth: Login OK:..." I searched on net and found that i have to add a Filter-Id with value Enterasys:version=1:mgmt=su But i could not find how to add this Filter-Id to mysql table. Can anyone help me please to solve this problem? Thanks a lot. -- King Regards Yucel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- King Regards Yucel
Yücel, Did you add the Filter-ID attribute to the radreply table? It should look like this. select * from radreply; +----+----------+-------------------+----+-----------------------------+ | id | username | attribute | op | value | +----+----------+-------------------+----+-----------------------------+ | 1 | test | Framed-IP-Address | = | 10.100.0.100 | | 2 | test | Framed-IP-Netmask | = | 255.255.255.0 | | 3 | test | Filter-ID | = | Enterasys:version=1:mgmt=su | +----+----------+-------------------+----+-----------------------------+ Tim From: freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freeradius.or g [mailto:freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freer adius.org] On Behalf Of Yücel Türkistan Sent: Saturday, February 05, 2011 1:49 PM To: FreeRadius users mailing list Subject: Re: Freeradius + Mysql + Enterasys management-access Thanks Ömer. I think that you understood my problem wrongly but i tried what you suggested. However it did not work. I had asked some people who uses Enterasys switches and they confirmed that i have to use Filter-Id but that guys dont know how it can be done under freeradius/unix. So i'm still in trouble with the issue. 2011/2/5 Omer Faruk SEN <omerfsen@gmail.com> You have to use radreply table for that. For example: select * from radreply; +----+----------+-------------------+----+---------------+ | id | username | attribute | op | value | +----+----------+-------------------+----+---------------+ | 1 | test | Framed-IP-Address | = | 10.100.0.100 | | 2 | test | Framed-IP-Netmask | = | 255.255.255.0 | +----+----------+-------------------+----+---------------+ On Sat, Feb 5, 2011 at 10:22 PM, Yücel Türkistan <yucel.turkistan@gmail.com> wrote:
Hello, I use FreeRADIUS version 2.1.3 with backend MySQL. It's working very good except this issue: When i try to use auth by Enterasys switch for management-access, Enterasys switch fails with login but FreeRADIUS says "Auth: Login OK:..." I searched on net and found that i have to add a Filter-Id with value Enterasys:version=1:mgmt=su But i could not find how to add this Filter-Id to mysql table. Can anyone help me please to solve this problem? Thanks a lot. -- King Regards Yucel
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- King Regards Yucel
Tim, This worked. Thank you so much. 2011/2/6 Tim Sylvester <tim.sylvester@networkradius.com>
Yücel,
Did you add the Filter-ID attribute to the radreply table? It should look like this.
select * from radreply;
+----+----------+-------------------+----+-----------------------------+
| id | username | attribute | op | value |
+----+----------+-------------------+----+-----------------------------+
| 1 | test | Framed-IP-Address | = | 10.100.0.100 |
| 2 | test | Framed-IP-Netmask | = | 255.255.255.0 |
| 3 | test | Filter-ID | = | Enterasys:version=1:mgmt=su |
+----+----------+-------------------+----+-----------------------------+
Tim
*From:* freeradius-users-bounces+tim.sylvester=networkradius.com@ lists.freeradius.org [mailto:freeradius-users-bounces+tim.sylvester= networkradius.com@lists.freeradius.org] *On Behalf Of *Yücel Türkistan *Sent:* Saturday, February 05, 2011 1:49 PM *To:* FreeRadius users mailing list *Subject:* Re: Freeradius + Mysql + Enterasys management-access
Thanks Ömer. I think that you understood my problem wrongly but i tried what you suggested.
However it did not work.
I had asked some people who uses Enterasys switches and they confirmed that i have to use Filter-Id but that guys dont know how it can be done under freeradius/unix.
So i'm still in trouble with the issue.
2011/2/5 Omer Faruk SEN <omerfsen@gmail.com>
You have to use radreply table for that. For example:
select * from radreply; +----+----------+-------------------+----+---------------+ | id | username | attribute | op | value | +----+----------+-------------------+----+---------------+ | 1 | test | Framed-IP-Address | = | 10.100.0.100 | | 2 | test | Framed-IP-Netmask | = | 255.255.255.0 | +----+----------+-------------------+----+---------------+
On Sat, Feb 5, 2011 at 10:22 PM, Yücel Türkistan <yucel.turkistan@gmail.com> wrote:
Hello, I use FreeRADIUS version 2.1.3 with backend MySQL. It's working very good except this issue: When i try to use auth by Enterasys switch for management-access, Enterasys switch fails with login but FreeRADIUS says "Auth: Login OK:..." I searched on net and found that i have to add a Filter-Id with value Enterasys:version=1:mgmt=su But i could not find how to add this Filter-Id to mysql table. Can anyone help me please to solve this problem? Thanks a lot. -- King Regards Yucel
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
King Regards
Yucel
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, did you just copy the original example (framed-ip etc?) rather than put your required attributes into the table? ;-) the list should be used to give you the helpful pointer...not do ALL your work for you :-) alan
participants (4)
-
Alan Buxey -
Omer Faruk SEN -
Tim Sylvester -
Yücel Türkistan