testing dynamic VLANs (RADIUS-assigned)

Vieri rentorbuy at yahoo.com
Fri Mar 15 15:56:13 CET 2019


Hi,

I'm trying to test a basic VLAN setup. For now I just need to assign a test user's host to a specific VLAN.

For simplicity's sake, in the default authorize section (sites-enabled) I am calling a custom policy "filter_username" function which includes the following test clause:

if (&User-Name == "tstusr")  {   
    update reply {        
        Tunnel-Type := VLAN        
        Tunnel-Medium-Type := IEEE-802        
        Tunnel-Private-Group-Id := 12       
        }
    accept
}

I see this in the log:

(0) Login OK: [tstusr] (from client D1881 port 15 cli F4-39-09-D9-14-C8)(0) 
Sent Access-Accept Id 16 from 10.215.144.91:1812 to 10.215.144.146:33288 length 0
(0)   Tunnel-Type := VLAN
(0)   Tunnel-Medium-Type := IEEE-802
(0)   Tunnel-Private-Group-Id := "12"
(0) Finished request

However, the host I'm connecting doesn't seem to be able to communicate with other hosts in VLAN 12.

How can I debug this further?

Thanks,

Vieri



More information about the Freeradius-Users mailing list