Cisco WLC + freeradius
LEONARDO FELL
leofell at univates.br
Mon Dec 19 17:35:37 CET 2011
Thanks you for your attention..
I changed the attribute but unfortunately it didn't work anyway..:
Sending Access-Accept of id 123 to 10.1.0.161 port 32769
Tunnel-Private-Group-Id:0 = "85"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Type:0 = VLAN
Filter-Id = "Enterasys:version=1:policy=Aluno"
MS-MPPE-Recv-Key = 0xae13f576b423a40084248c8977618104e42dafb4153e556f1e6b06da85ab7d46
MS-MPPE-Send-Key = 0x40e5448be214dfbf2fb5a16cb04fde4b70ee543850ba4a8c88fbf6e59f4a39aa
EAP-Message = 0x030c0004
Message-Authenticator = 0x00000000000000000000000000000000
User-Name = "leofell"
I don't know what is the problem, I have an interface vlan ID 85 on the WLC, I marked "AAA overide" on the wlan configuration..
Do you know what anymore else I could do ?
Cheers!
--
Leonardo Fell
----- Mensagem original -----
De: "Alan Buxey" <A.L.M.Buxey at lboro.ac.uk>
Para: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
Enviadas: Segunda-feira, 19 de Dezembro de 2011 14:08:39
Assunto: Re: Cisco WLC + freeradius
Hi,
> However, when a try to connect, the freeradius replies a "0" (ex: Tunnel-Private-Group-Id:0) after the attribute, as you can see below:
>
> Sending Access-Accept of id 146 to 10.1.0.161 port 32768
> Tunnel-Private-Group-Id:0 = "85"
> Tunnel-Medium-Type:0 = 802
> Tunnel-Type:0 = VLAN
> Filter-Id = "Enterasys:version=1:policy=Aluno"
> MS-MPPE-Recv-Key = 0xcfcf3c464de734110cda4f22dc1ed36c2e7e5c629861059036e61fb5e98d104b
> MS-MPPE-Send-Key = 0x8115583c24b0c533eca2417e1a82e092bd908417dee2cecdeb3b89d857f4634f
> EAP-Message = 0x030c0004
> Message-Authenticator = 0x00000000000000000000000000000000
> User-Name = "leofell"
>
> I think it may the problem and I'd like to know why it happens..
nope. no problem eg
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "666"
its perfectly fine to have the :0
but as you can see from my example log output...i define the Medium-Type
properly - change yours to match and it might work for you :-)
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list