Hi Oliver, thanks for the answer!

>>
>> user          Auth-Type := EAP, User-Password == "userpsw"
>>               Reply-Message = "Hi user!!!",
>>               Service-Type = Framed-User,
>>               Framed-Protocol = PPP,
>>               Framed-IP-Address = 33.33.33.2,
>>               Framed-IP-Netmask = 255.255.255.0,

>Here you assign the network 33.33.33.0/24 to the user. His interface
>gets 33.33.33.2 as ip in this network, which gets routed to this IP.

I'm agreeing with you, I'm trying to assign to the "users NIC" interface
one IP inside the range of the VLAN 1!!! I want to make VLANs for
different groups of users inside the LAN. That's the reason I implemented
the VLAN 1.

>> interface Vlan1
>>  ip address 33.33.33.1 255.255.255.0

>But wait! Your cisco has an interface in this network!

Of course!!! If it doesn't have one, how the users of this VLAN can talk?

>Won't work. The cisco will not accept the routing information you did
send in your
>radius paket. So the user should get droppen.

Why? Maybe I didn't understood the attribute Framed-IP-Address or the
Framed-IP-Netmask. And what are the differences between uses
Framed-IP-Address/Framed-IP-Netmask or Framed-Routed?

>If you just want to try to assign one IP, please read the FAQ and do not
use a netmask, >cause this is propably not what you want...

I had already proved without the netmask, only with the address, and with
the addres and the Frame-Routed but steel doesn't work.

Albert


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to