cisco phones

[Martin, Jeremy]

Matthew

I have been watching this thread and we do a similar thing except most of our sites use brocade device and there were much easier to deal with.  We do have a site that has cisco switches and am wondering when this gets resolved if you might share the final output (attributes and relevant switch config) for reference.  We have quickly experimented with the devices and although we never got any errors the devices never seem to do the assignments.

-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+jmartin=emcc.edu at lists.freeradius.org] On Behalf Of Vacheslav
Sent: Tuesday, January 30, 2018 7:26 AM
To: 'FreeRadius users mailing list' <freeradius-users at lists.freeradius.org>
Subject: RE: cisco phones

  Thank you for replying, we're getting closer to the resolution:
  tried
  Cisco-AVPair:="device-traffic-class=voice"
  Tunnel-Type := VLAN
  Tunnel-Medium-Type := IEEE-802
  Tunnel-Private-Group-ID := 23

Got:

Auth: (175) Invalid user (sql: Failed to create the pair: Invalid character ' ' in attribute): [ip phone name/<via Auth-Type = eap>] (from client Switch port 50145 cli mac) Tue Jan 30 15:14:37 2018 : Auth: (175) Login incorrect (sql: Failed to create the pair: Invalid character ' ' in attribute): [ip phone name/<via Auth-Type = eap>] (from client Switch port 50145 cli mac)

Then I tried:

  Cisco-AVPair:=device-traffic-class=voice
  Tunnel-Type := VLAN
  Tunnel-Medium-Type := IEEE-802
  Tunnel-Private-Group-ID := 1:VOICE-LAN

With same error.

I also tried:

  Cisco-AVPair:=device-traffic-class=voice
  Tunnel-Type := VLAN
  Tunnel-Medium-Type := IEEE-802
  Tunnel-Private-Group-ID := 23

What does this mean?

-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+m_zouhairy=skno.by at lists.freeradius.org] On Behalf Of Matthew Newton
Sent: Tuesday, January 30, 2018 3:05 PM
To: freeradius-users at lists.freeradius.org
Subject: Re: cisco phones

On Tue, 2018-01-30 at 14:07 +0300, Vacheslav wrote:
> 
> cisco-avpair="device-traffic-class=voice"
> Tunnel-Type=1:VLAN
> Tunnel-Medium-Type=1:802
> Tunnel-Private-Group-ID=1:VOICE-LAN
> 
> So I added them as check attributes, with := but I got: 
> Auth: (163) Invalid user (sql: Error parsing value: Unknown or invalid 
> value "1:VLAN" for attribute Tunnel-Type):

  Tunnel-Type := VLAN
  Tunnel-Medium-Type := IEEE-802
  Tunnel-Private-Group-ID := xxx

where xxx is the VLAN number you want the device put in to.

--
Matthew

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html