cisco phones

[Vacheslav]

-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+m_zouhairy=skno.by at lists.freeradius.org] On Behalf Of Nathan Ward
Sent: Monday, February 5, 2018 1:35 PM
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Subject: Re: cisco phones


> On 5/02/2018, at 11:23 PM, Vacheslav <m_zouhairy at skno.by> wrote:
> 
>> Then I replaced the last one with :
>> 
>> Tunnel-Private-Group-Id:1 := 23 as a reply attribute And it didn't 
>> change anything as a result.
> 
>> If the debug log shows those attributes being sent back to the NAS, then the server is configured correctly.  Blame the NAS for not doing what the server says to do.
> How can I blame cisco for not accepting cisco attributes? 

>Is FreeRADIUS sending the expected attributes back to the switch/NAS?

The switch confirms that the phone authenticates and authorizes.

>If FreeRADIUS is sending what you expect (look at FR debug, or a packet capture), then you need to talk to your vendor and ask them why their product is not doing what you expect with that information.

>If FreeRADIUS is not sending what you expect, please configure FreeRADIUS to send what you want it to send. If you have specific questions about FreeRADIUS I’m sure some people can help. Asking about Cisco things and sharing Cisco config and Cisco debug is not useful. Tell us what your NAS is sending to FreeRADIUS, and what FreeRADIUS is replying with, and what you’d like FreeRADIUS to do differently.

>We can’t tell you what FreeRADIUS needs to send - if you don’t know what it needs to send, you need to talk to your vendor.


>It sounds like FreeRADIUS is sending what you expect, so, I think you need to talk to your vendor.
I did expect that this will end in the cisco forums except I wanted to reach the end here and we are there.

--
>Nathan Ward


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html