RE: VLAN assignment to HP Switch with 802.1x client

2013-08-09 Thread Shaw, Colin M.
> > You could move "files" above "eap" but IMO it's better (cleaner, more > obvious) to run this in post-auth like so: > > authorize { >... >eap { > ok = return >} >... > } > post-auth { >... >files >... > } > > Note that you'll need to set the "postauth_usersfile"

Re: VLAN assignment to HP Switch with 802.1x client

2013-08-09 Thread Iliya Peregoudov
On 08.08.2013 19:16, Shaw, Colin M. wrote: [peap] Using saved attributes from the original Access-Accept User-Name = "testx" [peap] Saving response in the cache Your inner-tunnel virtual server returns only User-Name attribute in Access-Accept. Configure your inner-tunnel virtual serv

Re: VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Phil Mayers
On 08/08/13 16:16, Shaw, Colin M. wrote: Thanks for the reply Phil. difference. Lastly, for testing purposes, if I insert the required attributes into the default post-auth then it all works and the wired client is assigned the correct vlan, so again the switch side must be ok and I also theref

Re: VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Phil Mayers
On 08/08/13 11:07, Shaw, Colin M. wrote: difference. Lastly, for testing purposes, if I insert the required attributes into the default post-auth then it all works and the wired client is assigned the correct vlan, so again the switch side must be ok and I also therefore presume all the dictiona