Assign VLAN

[Alan DeKok]

Rangel, Luciano wrote:
> 	I'm not trying debug logs in switch.

  Then why are you looking at the debug log of the switch?

  Why are you not looking at the debug log of the server?

> 	I simply answered the question of how I knew that my switch received vlan 0 instead 200.

  Did the server *send* VLAN of 200?

  You've looked at the config files, but have been going to great effort
to avoid looking at the debug output.

> 	The help I'm asking is:
> 
> 	I send attribute Tunnel-Private-Group-Id = "200" with Freeradius and send same attribute with ACS. Why switch interpret differently.

  No... you *think* you told FreeRADIUS to send VLAN 200.  But you never
*checked* if it was sending that.

> 	I don´t search the problem. My users file in freeradius is correct, debug logs show that freeradius is send attribute correct.

  You've never posted that.

> 	Why this not work?

  Because the Access-Accept from ACS is *different* than the
Access-Accept from FreeRADIUS.

  If you make the Access-Accept from FreeRADIUS the same as the
Access-Accept from ACS, it *will* work.  There's no magic in RADIUS.

  Use wireshark to look at the packets from ACS.

  Alan DeKok.