vlan assigment on called-station-id
Hello, I have a problem with assigment vlan, i have two locations with 6 AP each, and two groups workers and guest (one serwer radius). If user is in group workers in site1 shoud be assigned to VLAN 200 or in group guest, than shoud be assigned to VLAN 300. On site2 workers vlan 400, guest 600.I want it to be checked using the mac address the APs. I try use user file, but not working. If i try plugin to wifi on site1 its ok but in site2 radius trying to get me assigned to vlan 200 not 400. How can I assign VLAN depending on location AP?? Maybe someone tried to do like that site1 DEFAULT LDAP-Group == workers Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id := 200 DEFAULT LDAP-Group == guest Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id := 300 site2 DEFAULT LDAP-Group == workers Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id := 400 DEFAULT LDAP-Group == guest Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id := 600 -- Z poważaniem / Yours sincerely Zenon Matuszyk mobile: 00 48 797 004 938 e-mail: zenon.matuszyk@networkers.pl www: http://www.networkers.pl
Hi,
How can I assign VLAN depending on location AP?? Maybe someone tried to do like that
I would advise that you use unlang int he server....with either IP wildcard matching or (poor performance) huntgroups. if (%{NAS-IP-Address ~= "/192\.168\.0\./" && %{LDAP-Group == "workers}) { update reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id := 200 } } etc etc alan
Thanks for answer, I try this, but can I use caled-id-station for this because NAS-IP-Address i have only one for two localization and i must use AP MAC address W dniu 2016-07-14 o 15:21, A.L.M.Buxey@lboro.ac.uk pisze:
Hi,
How can I assign VLAN depending on location AP?? Maybe someone tried to do like that I would advise that you use unlang int he server....with either IP wildcard matching or (poor performance) huntgroups.
if (%{NAS-IP-Address ~= "/192\.168\.0\./" && %{LDAP-Group == "workers}) { update reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id := 200 } }
etc etc
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Z poważaniem / Yours sincerely Zenon Matuszyk mobile: 00 48 797 004 938 e-mail: zenon.matuszyk@networkers.pl www: http://www.networkers.pl
Hi,
I try this, but can I use caled-id-station for this because NAS-IP-Address i have only one for two localization and i must use AP MAC address
sure you can! just look at the atttributes available - both in the docs but also if you run in debug mode, see whats in the packets coming to your server! obviously, you can also put entries in clients.conf etc client example { ipaddr = 192.168.0.1 nas_type = other secret = supersecret purpose = cleanroom } in unlang if (%{client:purpose} == "cleanroom") { etc etc } yes, you can make up anything in the client section and use as a tag....multiple tags...etc! alan
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Zenon Matuszyk