Hi, I found a few articles online about dynamically assigning VLAN IDs to users using RADIUS, this article was the most useful: http://searchsecurity.techtarget.com/general/0,295582,sid14_gci1169011,00.ht... I tried setting up something like this from that page using my mysql tables in FreeRADIUS: Tunnel-Type=VLAN (13) Tunnel-Medium-Type=802 Tunnel-Private-Group-ID=VLANID But it doesn't seem to be working. Has anyone had any experience in doing this? It could just be that my NAS isn't compatible but I'd like to know if anyone has had any success doing this and any advice you could give. Thanks, Darren Maden
Hi,
Tunnel-Type=VLAN (13) Tunnel-Medium-Type=802 Tunnel-Private-Group-ID=VLANID
Tunnel-Medium-Type = "IEEE-802" Tunnel-Type = "VLAN" Tunnel-Private-Group-Id = "XXX" where XXX is your VLAN number ID. NB IEEE-802. thats the proper specification for that attribute in almost all cases. certainly in the current dictionaries. alan
A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
Tunnel-Type=VLAN (13) Tunnel-Medium-Type=802 Tunnel-Private-Group-ID=VLANID
Tunnel-Medium-Type = "IEEE-802" Tunnel-Type = "VLAN" Tunnel-Private-Group-Id = "XXX"
where XXX is your VLAN number ID. NB IEEE-802. thats the proper specification for that attribute in almost all cases. certainly in the current dictionaries.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
If your NAS doesn't explicitly state that it supports it, then it probably doesn't .... It's been a right pain, and cost us quite a bit of money getting Access Points that support dynamic VLAN assignment .. -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Arran Cudbard-Bell -
Darren Maden