VMPS with MySQL default VLAN

29 Oct 2015

      Good afternoon.

I've got problem with configuring VMPS with MySQL and default VLAN.
This is relevant part of vmps config which i use:

 update reply {
                        &VMPS-Packet-Type = VMPS-Join-Response
                        &VMPS-Cookie = &VMPS-Mac

                        &VMPS-VLAN-Name = "Public_INET"

                        #  If you have VLAN's in a database, you can select
                        #  the VLAN name based on the MAC address.
                        #

                        &VMPS-VLAN-Name = "%{sql:select vlan from mac2vlan
where mac='%{VMPS-Mac}'}"

}

In this configuration, VMPS always return VLAN value as Public_INET. Even
if i use MAC address which is in MySQL database. In debug output i can see
that VLAN is successfully returned from MySQL, but return from FreeRADIUS
is Public_INET. Debug output is as follows :

        VMPS-Packet-Type = VMPS-Join-Request
        VMPS-Error-Code = VMPS-No-Error
        VMPS-Sequence-Number = 4660
        VMPS-Client-IP-Address = 127.0.0.1
        VMPS-Port-Name = "Fa0/1"
        VMPS-VLAN-Name = ""
        VMPS-Domain-Name = ""
        VMPS-Unknown = 0x00
        VMPS-MAC = 68:f7:28:e7:d8:ec
(1) Received Access-Request Id 4660 from 127.0.0.1:59323 to 127.0.0.1:1589
length 60
(1)   VMPS-Packet-Type = VMPS-Join-Request
(1)   VMPS-Error-Code = VMPS-No-Error
(1)   VMPS-Sequence-Number = 4660
(1)   VMPS-Client-IP-Address = 127.0.0.1
(1)   VMPS-Port-Name = "Fa0/1"
(1)   VMPS-VLAN-Name = ""
(1)   VMPS-Domain-Name = ""
(1)   VMPS-Unknown = 0x00
(1)   VMPS-MAC = 68:f7:28:e7:d8:ec
Doing VMPS
(1)   vmps {
(1)     if (!&VMPS-Mac) {
(1)     if (!&VMPS-Mac)  -> FALSE
(1)     [mac2vlan] = ok
(1)     update reply {
(1)       &VMPS-Packet-Type = VMPS-Join-Response
(1)       &VMPS-Cookie = &VMPS-Mac -> 68:f7:28:e7:d8:ec
(1)       &VMPS-VLAN-Name = "Public_INET"
(1)       EXPAND %{User-Name}
(1)          -->
(1)       SQL-User-Name set to ''
rlm_sql (sql): Reserved connection (2)
(1)       Executing select query: select vlan from mac2vlan where
mac='68:f7:28:e7:d8:ec'
rlm_sql (sql): Released connection (2)
rlm_sql (sql): Need 4 more connections to reach 10 spares
rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket,
server version 5.1.73, protocol version 10
(1)       EXPAND %{sql:select vlan from mac2vlan where mac='%{VMPS-Mac}'}
(1)          --> OFFICE
(1)       VMPS-VLAN-Name = OFFICE
(1)     } # update reply = noop
(1)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){
(1)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE
(1)   } # vmps = ok
Done VMPS
(1)   vmps {
(1)     if (!&VMPS-Mac) {
(1)     if (!&VMPS-Mac)  -> FALSE
(1)     [mac2vlan] = ok
(1)     update reply {
(1)       &VMPS-Packet-Type = VMPS-Join-Response
(1)       &VMPS-Cookie = &VMPS-Mac -> 68:f7:28:e7:d8:ec
(1)       &VMPS-VLAN-Name = "Public_INET"
(1)       EXPAND %{User-Name}
(1)          -->
(1)       SQL-User-Name set to ''
rlm_sql (sql): Reserved connection (3)
(1)       Executing select query: select vlan from mac2vlan where
mac='68:f7:28:e7:d8:ec'
rlm_sql (sql): Released connection (3)
(1)       EXPAND %{sql:select vlan from mac2vlan where mac='%{VMPS-Mac}'}
(1)          --> OFFICE
(1)       VMPS-VLAN-Name = OFFICE
(1)     } # update reply = noop
(1)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){
(1)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE
(1)   } # vmps = ok
(1) Sent Access-Accept Id 4660 from 127.0.0.1:1589 to 127.0.0.1:59323
length 0
        VMPS-VLAN-Name = "Public_INET"
        VMPS-Cookie = 68:f7:28:e7:d8:ec
(1) Finished request
(1) Cleaning up request packet ID 4660 with timestamp +24
Ready to process requests

When i place first mysql request and then i set default VLAN, than returned
VLAN from VMPS is correct when i use MAC address which is in DB, but when i
use other MAC returned VLAN is empty. Config as follows:

update reply {
                        &VMPS-Packet-Type = VMPS-Join-Response
                        &VMPS-Cookie = &VMPS-Mac

                        #  If you have VLAN's in a database, you can select
                        #  the VLAN name based on the MAC address.
                        #

                        &VMPS-VLAN-Name = "%{sql:select vlan from mac2vlan
where mac='%{VMPS-Mac}'}"

                       &VMPS-VLAN-Name = "Public_INET"

 }

Debug output with MAC from DB:

        VMPS-Packet-Type = VMPS-Join-Request
        VMPS-Error-Code = VMPS-No-Error
        VMPS-Sequence-Number = 4660
        VMPS-Client-IP-Address = 127.0.0.1
        VMPS-Port-Name = "Fa0/1"
        VMPS-VLAN-Name = ""
        VMPS-Domain-Name = ""
        VMPS-Unknown = 0x00
        VMPS-MAC = 68:f7:28:e7:d8:ec
(0) Received Access-Request Id 4660 from 127.0.0.1:60360 to 127.0.0.1:1589
length 60
(0)   VMPS-Packet-Type = VMPS-Join-Request
(0)   VMPS-Error-Code = VMPS-No-Error
(0)   VMPS-Sequence-Number = 4660
(0)   VMPS-Client-IP-Address = 127.0.0.1
(0)   VMPS-Port-Name = "Fa0/1"
(0)   VMPS-VLAN-Name = ""
(0)   VMPS-Domain-Name = ""
(0)   VMPS-Unknown = 0x00
(0)   VMPS-MAC = 68:f7:28:e7:d8:ec
Doing VMPS
(0)   vmps {
(0)     if (!&VMPS-Mac) {
(0)     if (!&VMPS-Mac)  -> FALSE
(0)     [mac2vlan] = ok
(0)     update reply {
(0)       &VMPS-Packet-Type = VMPS-Join-Response
(0)       &VMPS-Cookie = &VMPS-Mac -> 68:f7:28:e7:d8:ec
(0)       EXPAND %{User-Name}
(0)          -->
(0)       SQL-User-Name set to ''
rlm_sql (sql): Reserved connection (0)
(0)       Executing select query: select vlan from mac2vlan where
mac='68:f7:28:e7:d8:ec'
rlm_sql (sql): Released connection (0)
rlm_sql (sql): Need 5 more connections to reach 10 spares
rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket,
server version 5.1.73, protocol version 10
(0)       EXPAND %{sql:select vlan from mac2vlan where mac='%{VMPS-Mac}'}
(0)          --> OFFICE
(0)       VMPS-VLAN-Name = OFFICE
(0)       &VMPS-VLAN-Name = "Public_INET"
(0)     } # update reply = noop
(0)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){
(0)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE
(0)   } # vmps = ok
Done VMPS
(0)   vmps {
(0)     if (!&VMPS-Mac) {
(0)     if (!&VMPS-Mac)  -> FALSE
(0)     [mac2vlan] = ok
(0)     update reply {
(0)       &VMPS-Packet-Type = VMPS-Join-Response
(0)       &VMPS-Cookie = &VMPS-Mac -> 68:f7:28:e7:d8:ec
(0)       EXPAND %{User-Name}
(0)          -->
(0)       SQL-User-Name set to ''
rlm_sql (sql): Reserved connection (1)
(0)       Executing select query: select vlan from mac2vlan where
mac='68:f7:28:e7:d8:ec'
rlm_sql (sql): Released connection (1)
(0)       EXPAND %{sql:select vlan from mac2vlan where mac='%{VMPS-Mac}'}
(0)          --> OFFICE
(0)       VMPS-VLAN-Name = OFFICE
(0)       &VMPS-VLAN-Name = "Public_INET"
(0)     } # update reply = noop
(0)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){
(0)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE
(0)   } # vmps = ok
(0) Sent Access-Accept Id 4660 from 127.0.0.1:1589 to 127.0.0.1:60360
length 0
        VMPS-VLAN-Name = "OFFICE"
        VMPS-Cookie = 68:f7:28:e7:d8:ec
(0) Finished request
(0) Cleaning up request packet ID 4660 with timestamp +5
Ready to process requests

This is debug output with MAC not present in DB:

        VMPS-Packet-Type = VMPS-Join-Request
        VMPS-Error-Code = VMPS-No-Error
        VMPS-Sequence-Number = 4660
        VMPS-Client-IP-Address = 127.0.0.1
        VMPS-Port-Name = "Fa0/1"
        VMPS-VLAN-Name = ""
        VMPS-Domain-Name = ""
        VMPS-Unknown = 0x00
        VMPS-MAC = 68:f7:28:e7:d8:ea
(1) Received Access-Request Id 4660 from 127.0.0.1:58809 to 127.0.0.1:1589
length 60
(1)   VMPS-Packet-Type = VMPS-Join-Request
(1)   VMPS-Error-Code = VMPS-No-Error
(1)   VMPS-Sequence-Number = 4660
(1)   VMPS-Client-IP-Address = 127.0.0.1
(1)   VMPS-Port-Name = "Fa0/1"
(1)   VMPS-VLAN-Name = ""
(1)   VMPS-Domain-Name = ""
(1)   VMPS-Unknown = 0x00
(1)   VMPS-MAC = 68:f7:28:e7:d8:ea
Doing VMPS
(1)   vmps {
(1)     if (!&VMPS-Mac) {
(1)     if (!&VMPS-Mac)  -> FALSE
(1)     [mac2vlan] = ok
(1)     update reply {
(1)       &VMPS-Packet-Type = VMPS-Join-Response
(1)       &VMPS-Cookie = &VMPS-Mac -> 68:f7:28:e7:d8:ea
(1)       EXPAND %{User-Name}
(1)          -->
(1)       SQL-User-Name set to ''
rlm_sql (sql): Reserved connection (2)
(1)       Executing select query: select vlan from mac2vlan where
mac='68:f7:28:e7:d8:ea'
(1)       SQL query returned no results
rlm_sql (sql): Released connection (2)
rlm_sql (sql): Need 4 more connections to reach 10 spares
rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket,
server version 5.1.73, protocol version 10
(1)       EXPAND %{sql:select vlan from mac2vlan where mac='%{VMPS-Mac}'}
(1)          -->
(1)       VMPS-VLAN-Name =
(1)       &VMPS-VLAN-Name = "Public_INET"
(1)     } # update reply = noop
(1)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){
(1)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE
(1)   } # vmps = ok
Done VMPS
(1)   vmps {
(1)     if (!&VMPS-Mac) {
(1)     if (!&VMPS-Mac)  -> FALSE
(1)     [mac2vlan] = ok
(1)     update reply {
(1)       &VMPS-Packet-Type = VMPS-Join-Response
(1)       &VMPS-Cookie = &VMPS-Mac -> 68:f7:28:e7:d8:ea
(1)       EXPAND %{User-Name}
(1)          -->
(1)       SQL-User-Name set to ''
rlm_sql (sql): Reserved connection (3)
(1)       Executing select query: select vlan from mac2vlan where
mac='68:f7:28:e7:d8:ea'
(1)       SQL query returned no results
rlm_sql (sql): Released connection (3)
(1)       EXPAND %{sql:select vlan from mac2vlan where mac='%{VMPS-Mac}'}
(1)          -->
(1)       VMPS-VLAN-Name =
(1)       &VMPS-VLAN-Name = "Public_INET"
(1)     } # update reply = noop
(1)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request){
(1)     if (&VMPS-Packet-Type == VMPS-Reconfirm-Request) -> FALSE
(1)   } # vmps = ok
(1) Sent Access-Accept Id 4660 from 127.0.0.1:1589 to 127.0.0.1:58809
length 0
        VMPS-VLAN-Name = ""
        VMPS-Cookie = 68:f7:28:e7:d8:ea
(1) Finished request
(1) Cleaning up request packet ID 4660 with timestamp +44
Ready to process requests

It looks like first value set to attribute &VMPS-VLAN-Name is mandatory and
it cant be overwrited. Is there any possibility to read VLANs from DB but
if MAC is not in DB table to set some default VLAN?

Thank You

Daniel

Daniel Pogac

tags

participants (1)