Hi Krzysztof, Thanks for sharing your experience. >Please add here: > vlan-assignment-mode string > accounting optional An 3Com product engineer gave me the same instruction, unfortunqtly the 4500G does not support the vlan-assignment-mode and accounting does not take optional as argument. Maybe it shoud. The 4500G is new, and like many new product it must go thru a real world user trial phase to uncover birth defects. This said 3com is going to replace my 4500G with a 5500G at no cost. And this is a solution to my problem -which is not a freeradius one anymore. Thanks again, enjoy the day,
Philippe. ----- Original Message ----- From: Krzysztof Olędzki <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: freeradius auto-vlan 3com switch 4500G Date: Fri, 16 Nov 2007 00:10:23 +0100 >On 2007-11-11 18:27, Philippe Breton wrote: >> On Sun, 2007-11-11 at 17:37 +0100, Krzysztof Olędzki >>> wrote: On 2007-11-10 17:30, Philippe Breton wrote: >>>>> Did you setup your switch properly: >>>>> >>>>> domain (...) >>>>> vlan-assignment-mode string >>>> Hard to give a 100% answer on this question. I believe >>>> I did with the help of 3com support. >>> This is the most important part. Please make sure it is >>> set up (display current-configuration). >> >> ... I agree with you. The 4500G is new to me. I believe I >> got it right. One important fact to keep in mind is the >> semantic is a litle different between the 5500g and 4500G >> , i.e. what's in this doc does not apply in the 4500G >> >http://www.3com.hu/download/switch_radius_setup.doc/switch_radius_setup.doc >> >> This is my current config: > >Please excuse me for the long delay. A day should be longer >than 24h. ;) > >> description VLAN181 >> # >> radius scheme system >> server-type extended >> primary authentication 127.0.0.1 1645 >> primary accounting 127.0.0.1 1646 >> user-name-format without-domain > >> radius scheme radius1 >> server-type standard >> primary authentication 192.168.181.18 >> key authentication sdfsdfsfsf >> user-name-format without-domain >> # >> domain system >> access-limit disable >> state active >> idle-cut disable >> self-service-url disable > > >> domain wustl.edu >> authentication default radius-scheme radius1 >> access-limit disable >> state active >> idle-cut disable >> self-service-url disable > >Please add here: > vlan-assignment-mode string > accounting optional > >It is required for 3c5500G, so it should also solve the >problem on 3c4500G. If not, please enable >radius/mac-authentication/port-security debugging on the >switch. > >Best regards, > > Krzysztof Olędzki >-- >Krzysztof Olędzki >Axel Springer Polska Sp. z o.o. >tel: +48-22-2320969 >fax: +48-22-2325530 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html