RE: freeRadiu, 802.1x and Cisco
Thanks. I've seen the same info from somebody else who also used HP switchs but it's already "fixed" in the new dictionary file in (pre) version 0.9. So that's unfortunately not my problem ... I'll continue to investigate with my Cisco devices (Catalyst 2950) and let you know when/if I found something !! -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] la part de Terry Green Envoyé : mardi 1 avril 2003 17:03 À : [EMAIL PROTECTED] Objet : RE: freeRadiu, 802.1x and Cisco I found with my HP switch, I needed to change the type of the Tunnel-Private-Group-ID to String in the dictionary.tunnel file. > -Original Message- > From: Olivier PERROT [mailto:[EMAIL PROTECTED] > Sent: Tuesday, April 01, 2003 4:49 AM > To: [EMAIL PROTECTED] > Subject: freeRadiu, 802.1x and Cisco > > > Hi all, > > I'am trying to setup authentication and automatic VLAN > attribution between > freeRadius box and a Cisco switch ... without success until now. > > The deal is to allow mobile users to be on the same VLAN even > if they aren't > using the same port and/or switch all over the campus. > > Authentication is working well with eap or leap but I'am not > able to deliver > VLAN information to Cisco device. I tried several mix of theses > configurations : > > 1)Cisco-AVPAIR = "tunnel-private-group-Id=40 tunnel-type=13 > tunnel-medium-type=6" > 2)Tunnel-Type=VLAN, > 3)Tunnel-Medium-Type=802 > 4)Tunnel-Private-Group-Id=40 > 5)Cisco-AVPAIR = "tunnel-type=VLAN tunnel-medium-type=802 media(6) > tunnel-private-group-ID=admin" > > None of them are working. > > Any ideas ? > > Thank you very much in advance, > > Olivier PERROT > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: freeRadiu, 802.1x and Cisco
I found with my HP switch, I needed to change the type of the Tunnel-Private-Group-ID to String in the dictionary.tunnel file. > -Original Message- > From: Olivier PERROT [mailto:[EMAIL PROTECTED] > Sent: Tuesday, April 01, 2003 4:49 AM > To: [EMAIL PROTECTED] > Subject: freeRadiu, 802.1x and Cisco > > > Hi all, > > I'am trying to setup authentication and automatic VLAN > attribution between > freeRadius box and a Cisco switch ... without success until now. > > The deal is to allow mobile users to be on the same VLAN even > if they aren't > using the same port and/or switch all over the campus. > > Authentication is working well with eap or leap but I'am not > able to deliver > VLAN information to Cisco device. I tried several mix of theses > configurations : > > 1)Cisco-AVPAIR = "tunnel-private-group-Id=40 tunnel-type=13 > tunnel-medium-type=6" > 2)Tunnel-Type=VLAN, > 3)Tunnel-Medium-Type=802 > 4)Tunnel-Private-Group-Id=40 > 5)Cisco-AVPAIR = "tunnel-type=VLAN tunnel-medium-type=802 media(6) > tunnel-private-group-ID=admin" > > None of them are working. > > Any ideas ? > > Thank you very much in advance, > > Olivier PERROT > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeRadiu, 802.1x and Cisco
Hi all, I'am trying to setup authentication and automatic VLAN attribution between freeRadius box and a Cisco switch ... without success until now. The deal is to allow mobile users to be on the same VLAN even if they aren't using the same port and/or switch all over the campus. Authentication is working well with eap or leap but I'am not able to deliver VLAN information to Cisco device. I tried several mix of theses configurations : 1) Cisco-AVPAIR = "tunnel-private-group-Id=40 tunnel-type=13 tunnel-medium-type=6" 2) Tunnel-Type=VLAN, 3) Tunnel-Medium-Type=802 4) Tunnel-Private-Group-Id=40 5) Cisco-AVPAIR = "tunnel-type=VLAN tunnel-medium-type=802 media(6) tunnel-private-group-ID=admin" None of them are working. Any ideas ? Thank you very much in advance, Olivier PERROT - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html