3com problem with service-type

Nuno Cervaens Nuno.Cervaens at cern.ch
Wed Jul 19 16:43:29 CEST 2006


Hi guys,

I have a lot of hp switches and a lot of 3com switches.
I have users that I want them to have Administrator privilege and others
that will have NAS-Prompt privilege.
So, my users files should be like this, so it can work for both brands:

userA Password = pass
        Service-Type = 7,
        3Com-User-Access-Level = 1

userB Password = pass
        Service-Type = 6,
        3Com-User-Access-Level = 3

The problem is that 3COM doesnt accept a service-type =7! It only
accepts Service-Type = 6! So the 3COM rejects the access-accept from
RADIUS for userA.
I know that I can use huntgroups and create for each huntgroup a
different account for the same user with different attributes, but I
dont want to use huntgroups because I already use it for Mac-address
authentication (and apparently a same NAS-IP-Address cannot belong to
more than 1 huntgroup as RADIUS returns the first huntgroup that matches
the NAS-IP-Address).

Does anyone has a solution for my problem?

Thanks,
Nuno




More information about the Freeradius-Users mailing list