Huawei switchs and MAC address authentication

[Pascal Legrand]

Now it works
i had to make 2 things on Huawei switch

the first that i understand :
mac-authen username macaddress format without-hyphen uppercase

the second that i dont understand
radius-server attribute translate
radius-attribute disable Framed-Protocol receive send

I dont know anything about "Framed-Protocol" and why i had to disable it
If someone can explain me
Thanks


> 
> 
> Le 09/04/2019 à 09:39, Matthew Newton a écrit :
>> On 9 April 2019 08:28:16 BST, Pascal Legrand 
>> <pascal.legrand at univ-orleans.fr> wrote:
>>>
>>> authorize file :
>>> 5820B1784219 Cleartext-Password := "5820B1784219", Nom-Machine :=
>>> "PORT-GIM-PRET-2"
>> ...
>>> but each time i try with huawei switch i've got this error message
>>> Auth: (0) Login incorrect (No Auth-Type found: rejecting the user via
>>> Post-Auth-Type = Reject): [5820b1784219/5820b1784219] (from client
>>> Switch-CM3 port 4098 cli 5820B1784219)  - Machine Inconnue
>>
>> The Huawei is sending in lowercase, you have uppercase in the users file.
>>
>>
> 
> First thanks for your answer
> i made some tests
> On freeradius i replace
> 5820B1784219 Cleartext-Password := "5820B1784219", Nom-Machine := 
> "PORT-GIM-PRET-2"
> with
> 5820b1784219 Cleartext-Password := "5820b1784219", Nom-Machine := 
> "PORT-GIM-PRET-2"
> 
> no success :
> Auth: (0) Login incorrect (No Auth-Type found: rejecting the user via 
> Post-Auth-Type = Reject): [5820b1784219/5820b1784219] (from client 
> Switch-CM3 port 4098 cli 5820B1784219)  - Machine Inconnue
> 
> 
> 

-- 
Pascal