Hi, I just wanted to share what I did in the end. First of all, it turned out that 3com actually interprets "IEEE-802" in proper way - and there was no need for unlang. However I'm glad I learned how it (unlang) works, and had to learn a bit more about RADIUS :-) So nothing's wasted.
There were two causes as to why the switch didn't work at first: it turns out that Comware3 switches (such as 4200G) have to have both authentication and authorization servers set up (hardly surprising), and I failed to do this :-) Shame on me. However, I've also found strange behaviour. Comware3 configuration allows for different VLAN indication modes in "domain" section: vlan-assignment-mode ? integer Integer Vlan assignment mode string String Vlan assignment mode vlan-list List Vlan assignment mode I'm not sure why, but if it works in "integer" mode (default), it switches port to "RADIUS-indicated-VLAN"+48 - so when RADIUS sends Tunnel-Private-Group-ID=4, the port goes to VLAN 52. Can't figure out why. But when I switched mode to "string" (which is supposed to work with VLAN names, not numbers - but interprets numbers nevertheless) - it work perfectly. Knowing unlang helped debugging this A LOT! So thank you very much for your support, it would've taken me much longer to figure it all out without it. /br Stan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
