Hello, is there a guide to configure vlan assignment on freeradius? I searched the documentation and didn't find. Thanks.
On Thu, Aug 31, 2023 at 9:13 AM Rodrigo Abrantes Antunes < rodrigoantunes@pelotas.ifsul.edu.br> wrote:
Hello, is there a guide to configure vlan assignment on freeradius? I searched the documentation and didn't find.
I've never assigned a VLAN, but the folks who wrote packetfence have: https://github.com/inverse-inc/packetfence You could clone the repo and examine the code. -m
Most of the time you just have to return these attributes with whatever values is useful for you. Tunnel-Type Tunnel-Medium-Type Tunnel-Private-Group-Id /K
On 31 Aug 2023, at 16:13, Rodrigo Abrantes Antunes <rodrigoantunes@pelotas.ifsul.edu.br> wrote:
Hello, is there a guide to configure vlan assignment on freeradius? I searched the documentation and didn't find.
Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Where you want to assign vlans, what is the nas ? Provide more info to better understand what are you doing … \ AK
On 31 Aug 2023, at 21:02, Rodrigo Abrantes Antunes <rodrigoantunes@pelotas.ifsul.edu.br> wrote:
Most of the time you just have to return these attributes with whatever values is useful for you.
Tunnel-Type Tunnel-Medium-Type Tunnel-Private-Group-Id
/K
I will try that, thanks.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Citando Kristofer Hallin <kristofer@sunet.se>:
Most of the time you just have to return these attributes with whatever values is useful for you.
Tunnel-Type Tunnel-Medium-Type Tunnel-Private-Group-Id
/K
This worked, thanks!! In sites-enabled/default I added this if (LDAP-Group == "mygroup"){ update reply { Tunnel-Type = "VLAN", Tunnel-Medium-Type = "IEEE-802", Tunnel-Private-Group-Id = "102" } } And I had to enable use_tunneled_reply on the eap module too. Is this the proper way to return the attributes or should I use the user files instead? Thanks
On Aug 31, 2023, at 12:18 PM, Rodrigo Abrantes Antunes <rodrigoantunes@pelotas.ifsul.edu.br> wrote:
Is this the proper way to return the attributes or should I use the user files instead?
If the server replies with the correct attributes, it's fine. The choice of which features / modules to use is up to you. If you have only a few simple rules, putting them into sites-enabled/default is good. If you have many hundreds of users + rules, the "files" module is easier. If you have thousands of users, "sql" is likely easier. Alan DeKok.
participants (5)
-
Alan DeKok -
Anatoliy Kushner -
Kristofer Hallin -
Matt Zagrabelny -
Rodrigo Abrantes Antunes