Hi Alex,

I'm gonna take a look at this, thank you for your response,
best regards.

Hi Gérold,

I think this might be of help

https://github.com/mcnewton/freeradius-server/commit/fbee1e9b4ce93c15d0f074ad3fdfb71ba095a4ed

Alex

On Thu, Mar 19, 2015 at 11:30 AM, Gérold Mougenel <g.mougenel@gmail.com>
wrote:

> Hi,
>
> I'm running freeradius 3.0.6.
>
> I'm already able to assign a VLAN to the port when my client is
> authenticated with a couple login/password but is it possible to be done
> when the client is authenticated via a certificate ?
>
> I can't find any ressources on the subject.
>
> Thank's for help.
>
>
> *MOUGENEL Gérold*
> Tel : 06.71.58.47.57
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

*MOUGENEL Gérold*
Tel : 06.71.58.47.57



2015-03-19 11:45 GMT+01:00 Alex Zetaeffesse <fzetafs@gmail.com>:

> Hi Gérold,
>
> I think this might be of help
>
>
> https://github.com/mcnewton/freeradius-server/commit/fbee1e9b4ce93c15d0f074ad3fdfb71ba095a4ed
>
> Alex
>
> On Thu, Mar 19, 2015 at 11:30 AM, Gérold Mougenel <g.mougenel@gmail.com>
> wrote:
>
> > Hi,
> >
> > I'm running freeradius 3.0.6.
> >
> > I'm already able to assign a VLAN to the port when my client is
> > authenticated with a couple login/password but is it possible to be done
> > when the client is authenticated via a certificate ?
> >
> > I can't find any ressources on the subject.
> >
> > Thank's for help.
> >
> >
> > *MOUGENEL Gérold*
> > Tel : 06.71.58.47.57
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

Yes, I assume that it's independent, but to assign a VLAN with the couple Login/PWD, you only need to precise the VLAN in the "users" file : Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = 31 *MOUGENEL Gérold* Tel : 06.71.58.47.57 2015-03-19 13:43 GMT+01:00 Alan DeKok <aland@deployingradius.com>:

On Mar 19, 2015, at 6:30 AM, Gérold Mougenel <g.mougenel@gmail.com> wrote:

...

I'm already able to assign a VLAN to the port when my client is authenticated with a couple login/password but is it possible to be done when the client is authenticated via a certificate ?

Yes. You assign the VLAN, as with any other authentication method. That’s it.

The authentication method is completely independent of VLAN assignment.

Alan DeKok.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

On Mar 19, 2015, at 9:06 AM, Gérold Mougenel <g.mougenel@gmail.com> wrote:

My fault sorry didn't finished my mail :

But with a certificate, how can you precise in which VLAN you want an user to be ?

That question makes no sense. A certificate is just a certificate. It doesn’t contain any VLAN information. You can’t assign a VLAN with a certificate. You *can* assign certificates based on User-Names. But that’s the same as with PAP authentication. You have to assign VLANs the RADIUS way. The authentication method doesn’t matter. I’ve already explained this. What else do I need to say to make you believe it? Alan DeKok.

We misunderstood each others, I didn't say that you could put VLAN information in as extra certificate field information, I just asked how can you assign VLAN using certificate, so the answer are : "and you can do the same way for certs if you want" "OpAnswer: use the CN name of the cert to decide on policies" Thx for all guys. *MOUGENEL Gérold* Tel : 06.71.58.47.57 2015-03-19 14:33 GMT+01:00 <A.L.M.Buxey@lboro.ac.uk>:

Hi,

...

That question makes no sense. A certificate is just a certificate. It doesn’t contain any VLAN information. You can’t assign a VLAN with a certificate.

well, you could confuse/scare people by saying that you could put VLAN information in as extra certificate field information ;-)

OpAnswer: use the CN name of the cert to decide on policies

alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html