Hi Oliver, thanks for the answer! >> >> user Auth-Type := EAP, User-Password == "userpsw" >> Reply-Message = "Hi user!!!", >> Service-Type = Framed-User, >> Framed-Protocol = PPP, >> Framed-IP-Address = 33.33.33.2, >> Framed-IP-Netmask = 255.255.255.0,
>Here you assign the network 33.33.33.0/24 to the user. His interface >gets 33.33.33.2 as ip in this network, which gets routed to this IP. I'm agreeing with you, I'm trying to assign to the "users NIC" interface one IP inside the range of the VLAN 1!!! I want to make VLANs for different groups of users inside the LAN. That's the reason I implemented the VLAN 1. >> interface Vlan1 >> ip address 33.33.33.1 255.255.255.0 >But wait! Your cisco has an interface in this network! Of course!!! If it doesn't have one, how the users of this VLAN can talk? >Won't work. The cisco will not accept the routing information you did send in your >radius paket. So the user should get droppen. Why? Maybe I didn't understood the attribute Framed-IP-Address or the Framed-IP-Netmask. And what are the differences between uses Framed-IP-Address/Framed-IP-Netmask or Framed-Routed? >If you just want to try to assign one IP, please read the FAQ and do not use a netmask, >cause this is propably not what you want... I had already proved without the netmask, only with the address, and with the addres and the Frame-Routed but steel doesn't work. Albert - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

