Aruba-User-Vlan, how to configure RADIUS to send the that aruba VSA to the controller

Ivan Kalik tnt at kalik.net
Fri Oct 2 23:32:25 CEST 2009


>>> have freeradius 2.1, and the configuration of my users file is like the
>>> following:
>>>
>>> ...
>>> DEFAULT Auth-Type = LDAP
>>> Aruba-User-Vlan = 20,
>>> Fall-Through : = 1
>>> ....
>>>
>>> once I do radiusd -X, I see only the first access-challenge with the
>>> Aruba-User-Vlan Attirbute, and no more access-challenges have this
>>> attribute.
>>
>> Any chance we can see that?
>>
> I do not understand what do you mean .

I mean that nobody is going to look at your wireshark capture. Post
freeradius debug.

> I have tried to see if radius
> client
> (radtest) sends the aruba-user-vlan in a access radius reply, like an
> access-accept and it works.
> But, using WPA2/EAP-PEAP using Aruba controller as a NAS , the radius
> sends
> inside an access challenge, the aruba-user-vlan VSA attirbute but only in
> two of the large amount of access-challenge, as you saw in that pictures,
> or
> print screen.

Erm. No, I haven't. Nor did, I believe, anybody else. If you want help
post freeradius debug (as suggested anywhere you care to look - README,
FAQ, this list ...)

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list