vlan and freeradius

omega bk omegabk at gmail.com
Wed Mar 3 15:45:56 CET 2010


in fact,

i got my client wired with winxp and authentication works well in 802.1x
this client is connected directly in my switch trough vlan3

i would like dynamically assign a successfull authentication trough vlan2
and faillure authentication to vlan1

autthentication is based in users file (not mac auth)

thanks u


2010/3/3 Michael Schwartzkopff <misch at multinet.de>

> Am Mittwoch, 3. März 2010 15:34:56 schrieb Jens Link:
> > omega bk <omegabk at gmail.com> writes:
> >
> > Hi,
> >
> > > so i would like to redirect my winxp authenticated to VLAN1 and if not
> > > authenticated , this client must be in vlan2
> > >
> > > i got a switch cisco
> > >
> > > so how to handla this with freeradius?
> >
> > Depends on how you do the authentication:
> >
> > Using certificates (either machine based or user based) 802.1x is the
> > way to go if it's okay for you to use only the MAC address of the client
> > (and you are using Cisco) VMPS might be worth a look.
> >
> > @Alan: I would document VMPS in some more detail in the wiki if my
> > access would be working. ;-)
> >
> > Jens
>
> Port authentication also works with mac addresses. You just have to pass
> back
> on the correct attributes to the cisco. AND your IOS has to be able to
> interprete them.
>
> Greetings,
>
> --
> Dr. Michael Schwartzkopff
> MultiNET Services GmbH
> Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany
> Tel: +49 - 89 - 45 69 11 0
> Fax: +49 - 89 - 45 69 11 21
> mob: +49 - 174 - 343 28 75
>
> mail: misch at multinet.de
> web: www.multinet.de
>
> Sitz der Gesellschaft: 85630 Grasbrunn
> Registergericht: Amtsgericht München HRB 114375
> Geschäftsführer: Günter Jurgeneit, Hubert Martens
>
> ---
>
> PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
> Skype: misch42
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100303/2c46604d/attachment.html>


More information about the Freeradius-Users mailing list