802.1x issues with different NAS' types

[Marco Miglietta]

Hi.
In order to solve the problem in passing VLAN related attribute during 
802.1x authentication with Aruba AP, I found the post below useful.
But this caused problems with VLAN assignment on Junipers switches 
during the 802.1x authentication process.
What is a way to solve the problem? The solutions seem to be mutually 
exclusive.

Thanks. Marco.


______________________________________________________________________________________________

Sending an attribute with the Access-Accept instead of Access-Challenge
Phil Mayers p.mayers at imperial.ac.uk
Wed Jan 12 18:00:05 CET 2011

     Previous message: Sending an attribute with the Access-Accept 
instead of Access-Challenge
     Next message: Sending an attribute with the Access-Accept instead 
of Access-Challenge
     Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On 12/01/11 16:33, Vivek Umasuthan wrote:
 > Hi All,
 > I am testing 802.1x support on our platform and I'm having trouble
 > figuring out how to include some attributes with Access-Accept. I read
 > the 'users' file man page but could not get the answer.

You need to add the attribute in the "inner-tunnel" virtual server, and
ensure you've set:

use_tunneled_reply = yes

...in the "peap {}" section of "eap.conf"

     Previous message: Sending an attribute with the Access-Accept 
instead of Access-Challenge
     Next message: Sending an attribute with the Access-Accept instead 
of Access-Challenge
     Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the Freeradius-Users mailing list

--