cisco phones

[Alan DeKok]

On Feb 2, 2018, at 3:16 AM, Vacheslav <m_zouhairy at skno.by> wrote:
> I deleted the attributes one at a time and test and it turns out the Tunnel-Type:=VLAN was that menace. I first added it again, this time as check attribute, without using the auto saved entry in the browser, and the login was ok. 

  That's weird.  Tunnel-Type is a standard attribute.

> You got happy ahead of time. Without the attribute it authenticated on  the data vlan. With the attribute, the switch reported the phone as dropped. Then I added the mentioned attribute as a reply keeping it as check also, and again the login was ok but the switch dropped the packets. Then I deleted the mentioned attribute from checking and no change. I final tried putting it 1:VLAN and 23:VLAN but that just makes freeradius spout:

  "1" is the tag number.  It's used for grouping multiple attributes.  It is *not* a VLAN number.

  If you want to use tags, you should use the same tag for all tagged attributes...

	Tunnel-Type:1 = VLAN
	Tunnel-Foo:1 = value
	...

  Alan DeKok.