unidentified users and vlan assignment

[Phil Mayers]

On 15/09/10 10:02, Fabien COMBERNOUS wrote:
>   Hi,
>
> We use the freeradius to assigne users in the vlan. The default settings
> rejects users in case of a request from an unidentified user. Instead of
> this we would like assign him to a specific vlan. I don't find
> information about how to do this. Any pointer or information are wellcome.

Are you using 802.1x or macauth?

If you are sending an access-reject, you can't assign a vlan. Reject 
means "give no service". You either need to send an accept with a vlan, 
or look for a "reject vlan" feature on your switch.

If you are using 802.1x, you probably can't send an accept for an 
unknown user, because you won't be able to complete the EAP session 
properly.