It's getting even more interesting: using the same configuration, but with another access point (same model and firmware version): works flawlessly. There are only two differences between the setups: - In the test environment, the AP is located near to the test machine (it was placed about 5-6 meters from the AP, no walls between) - We didn't configure VLANs on the test AP.
I have a feeling, that the AP refuses the connection, because some kind of privilege checking fails (the client is not privileged to access the required VLAN). Does FreeRADIUS configuration need anything special, if the AP is configured for multiple VLANs? The VLAN configuration looks like this in the live environment: VLAN4 - Private vlan, the radius server is located here and an EAP-protected SSID is mapped to this VLAN VLAN5 - Public vlan, mapped to an open SSID VLAN6 - Management vlan - untagged - we configure the APs using this VLAN Probably the LDAP server has to provide some extra attribute which grants access to VLAN4, but I'm not sure. Could you please help? Thank you Gergely Kiss 2009/6/12 kissg <[email protected]> > 2009/6/11 Matthieu Lazaro <[email protected]> > >> ! >> eap profile < Profile Name> >> method mschapv2 >> ! >> > > I don't have the lines above in my config. Does this have any influence on > the way the AP proxies radius packets? I think, this is only relevant if the > AP authenticates using its own database, right? >
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
