Dynamic Vlan assigment 802.1x with cisco

Guillermo Borrallo guillebs89 at hotmail.com
Thu Apr 22 09:47:47 CEST 2010


Hi,
I have a problem to change vlan on a Catalyst 2950 switch using the 802.1x protocol. The problem is that no changes to the vlan you specified. The authentication and validation of the user is correct, but does not change vlan.

Freeradius User Configuration:
steve	Cleartext-Password := "testing"	Service-Type = Framed-User,	Tunnel-Type = VLAN,	Tunnel-Medium-Type = IEEE-802,	Tunnel-Private-Group-ID = 2 
Switch 2950 configuration:
aaa new-model
aaa authentication login default local
aaa authentication dot1x default group radius
enable secret 5 $1$Hpyf$/AA8F3lVYES7KUq0abTqy.
interface FastEthernet0/3
 switchport mode access
 no ip address
 dot1x port-control auto
interface Vlan1
 ip address 192.168.250.250 255.255.255.0
 no ip route-cache
ip http server
ip radius source-interface FastEthernet0/2
radius-server host 192.168.250.200 auth-port 1812 acct-port 1813 key password
radius-server retransmit 3
no radius-server attribute nas-port
privilege exec level 0 line show


Right now, this created the vlan 1 and vlan 2
Thanks.Guillermo 		 	   		  
_________________________________________________________________
¡Citas! ¡Ligues! ¿Salimos? ¿Cómo es tu pareja ideal? Búscala en el sitio nº1… ¡Regístrate ya!
http://contactos.es.msn.com/?mtcmk=015352
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100422/79badbb6/attachment.html>


More information about the Freeradius-Users mailing list