Using unlang to customize Tunnel-Medium-Type for 3com switches

stasheck stasheck.fora at gmail.com
Fri Sep 30 16:41:01 CEST 2011


Hi,
I just wanted to share what I did in the end.

First of all, it turned out that 3com actually interprets "IEEE-802"
in proper way - and there was no need for unlang. However I'm glad I
learned how it (unlang) works, and had to learn a bit more about
RADIUS :-) So nothing's wasted.

There were two causes as to why the switch didn't work at first: it
turns out that Comware3 switches (such as 4200G) have to have both
authentication and authorization servers set up (hardly surprising),
and I failed to do this :-) Shame on me.

However, I've also found strange behaviour.

Comware3 configuration allows for different VLAN indication modes in
"domain" section:
vlan-assignment-mode ?
  integer    Integer Vlan assignment mode
  string     String Vlan assignment mode
  vlan-list  List Vlan assignment mode

I'm not sure why, but if it works in "integer" mode (default), it
switches port to "RADIUS-indicated-VLAN"+48 - so when RADIUS sends
Tunnel-Private-Group-ID=4, the port goes to VLAN 52. Can't figure out
why.

But when I switched mode to "string" (which is supposed to work with
VLAN names, not numbers - but interprets numbers nevertheless) - it
work perfectly. Knowing unlang helped debugging this A LOT!

So thank you very much for your support, it would've taken me much
longer to figure it all out without it.

/br
Stan



More information about the Freeradius-Users mailing list