VLAN Attribute ?

[Difan Zhao]

Actually I found these attributes from Cisco switch configuration manual
and I just pasted them in and they worked...

However I just did a search again and I found the attribute is in this
dictionary file:

dictionary.rfc3580:VALUE        Tunnel-Type            VLAN         13

BTW I also got a question for you. It has a ":0" following the
"Tunnel-Type". What is it for? I just removed it and it still works.
However in the Radius -X debug it still has the :0 appending the
attribute name. Any idea??

Thanks,
 
Difan Zhao M.Eng
Network Engineer
difan.zhao at guest-tek.com
www.guest-tek.com
Office: 403-509-1010 ext 3048
Cell: 403-689-7514
-----Original Message-----
From:
freeradius-users-bounces+difan.zhao=guest-tek.com at lists.freeradius.org
[mailto:freeradius-users-bounces+difan.zhao=guest-tek.com at lists.freeradi
us.org] On Behalf Of Fabien COMBERNOUS
Sent: Wednesday, April 21, 2010 3:12 AM
To: FreeRadius users mailing list
Subject: Re: VLAN Attribute ?

Difan Zhao wrote:
> You have to send some attributes to the switch. I am using Cisco
> switches and here are the attributes that I need to send to the switch
> to switch the port to VLAN 3:
>
> bob	  Cleartext-Password := "test"
>         Tunnel-Type:0 = VLAN,
>         Tunnel-Medium-Type:0 = IEEE-802,
>         Tunnel-Private-Group-Id:0 = "3",
>         Tunnel-Preference = 0x000000
>
> Other switch vendor may use different attributes.
Thank you for your input.

I'm using HP procurve core switch. I used the following values :
Tunnel-Type = 
13                                                                      
Tunnel-Medium-Type = 6
Tunnel-Private-Group-ID =4

It works. In radius log i get the display you given. ie VLAN instead of 
13, IEEE-802 instead of 6. I will make some tests to use directly your 
input. It is easier to read.

But i am surprise. In the rfc the value 13 does not exist about 
Tunnel-Type :
http://freeradius.org/rfc/rfc2868.html#Tunnel-Type

Where is decided the value of 13 ?

Best regards,

-- 
*Fabien COMBERNOUS*
/unix system engineer/
www.kezia.com <http://www.kezia.com/>
*Tel: +33 (0) 467 992 986*
Kezia Group
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html