Re: FreeRADIUS+VLANs

2007-06-22 Thread Arran Cudbard-Bell
[EMAIL PROTECTED] wrote:
> Hi,
> 
>> Tunnel-Type=VLAN (13)
>> Tunnel-Medium-Type=802
>> Tunnel-Private-Group-ID=VLANID
> 
> 
> 
> Tunnel-Medium-Type = "IEEE-802"
> Tunnel-Type = "VLAN"
> Tunnel-Private-Group-Id = "XXX"
> 
> where XXX is your VLAN number ID. NB IEEE-802.  thats the proper
> specification for that attribute in almost all cases. certainly
> in the current dictionaries.
> 
> alan
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

If your NAS doesn't explicitly state that it supports it, then it 
probably doesn't 

It's been a right pain, and cost us quite a bit of money getting Access 
Points that support dynamic VLAN assignment ..
-- 
Arran Cudbard-Bell ([EMAIL PROTECTED])
Authentication, Authorisation and Accounting Officer
Infrastructure Services | ENG1 E1-1-08
University Of Sussex, Brighton
EXT:01273 873900 | INT: 3900
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: FreeRADIUS+VLANs

2007-06-22 Thread A . L . M . Buxey
Hi,

> Tunnel-Type=VLAN (13)
> Tunnel-Medium-Type=802
> Tunnel-Private-Group-ID=VLANID



Tunnel-Medium-Type = "IEEE-802"
Tunnel-Type = "VLAN"
Tunnel-Private-Group-Id = "XXX"

where XXX is your VLAN number ID. NB IEEE-802.  thats the proper
specification for that attribute in almost all cases. certainly
in the current dictionaries.

alan
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


FreeRADIUS+VLANs

2007-06-22 Thread Darren Maden
Hi,
I found a few articles online about dynamically assigning VLAN IDs to 
users using RADIUS, this article was the most useful:

http://searchsecurity.techtarget.com/general/0,295582,sid14_gci1169011,00.html

I tried setting up something like this from that page using my mysql 
tables in FreeRADIUS:

Tunnel-Type=VLAN (13)
Tunnel-Medium-Type=802
Tunnel-Private-Group-ID=VLANID

But it doesn't seem to be working.  Has anyone had any experience in 
doing this?  It could just be that my NAS isn't compatible but I'd like 
to know if anyone has had any success doing this and any advice you 
could give.


Thanks,

Darren Maden
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html