2015-03-31 19:23 GMT+02:00 Luca Bertoncello <[email protected]>:

> alessandro macuz <[email protected]> schrieb:
>
> Hi Alessandro
>
> > which kind of RADIUS server are you using? Does the OpenWRT get the three
> > attributes (tcpdump helps you on that)?
>
> I'm using Freeradius 2.1.8 on my Ubuntu-PC.
> Of course it sends the attributes:
>
> Tunnel-Type             =       VLAN
> Tunnel-Medium-Type      =       IEEE-802
> Tunnel-Private-Group-Id =       10
>
> > Does the client get an IP address?
>
> Right now (for the experiments) I assigned static IP!
>
> > Have you confgured the VLANs on OpenWRT? How? Tell us more on the Layer 2
> > topology.
>
> I configured two VLANs (10 and 666) on OpenWRT and they runs perfectly if I
> don't try to assign the WLAN to the VLAN using Radius.
> Here my /etc/config/network:
>
> config interface 'loopback'
>         option ifname 'lo'
>         option proto 'static'
>         option ipaddr '127.0.0.1'
>         option netmask '255.0.0.0'
>
> config globals 'globals'
>         option ula_prefix 'fd4a:81ea:92c9::/48'
>
> config interface 'lan'
>         option force_link '1'
>         option type 'bridge'
>         option proto 'none'
>         option _orig_ifname 'eth0.10 wlan0'
>         option _orig_bridge 'true'
>         option ifname 'eth0.10 wlan0'
>
> config interface 'guestlan'
>         option force_link '1'
>         option type 'bridge'
>         option proto 'none'
>         option _orig_ifname 'eth0.666 wlan0-1'
>         option _orig_bridge 'true'
>         option ifname 'eth0.666 wlan0-1'
>
> config interface 'man'
>         option ifname 'eth0'
>         option proto 'static'
>         option ipaddr '192.168.20.120'
>         option netmask '255.255.255.0'
>         option dns '192.168.20.3'
>         option dns_search 'lucabert.intra'
>
> config interface 'wan'
>         option ifname 'eth0.2'
>         option proto 'none'
>
> config interface 'wan6'
>         option ifname '@wan'
>         option proto 'dhcpv6'
>
> config switch
>         option name 'switch0'
>         option reset '1'
>         option enable_vlan '1'
>         option enable_vlan4k '1'
>
> config switch_vlan
>         option device 'switch0'
>         option vlan '1'
>         option ports '1 5'
>
> config switch_vlan
>         option device 'switch0'
>         option vlan '2'
>         option ports '5t'
>
> config switch_vlan
>         option device 'switch0'
>         option vlan '10'
>         option ports '1t 4 5t'
>
> config switch_vlan
>         option device 'switch0'
>         option ports '1t 5t'
>         option vlan '20'
>
> config switch_vlan
>         option device 'switch0'
>         option vlan '666'
>         option ports '1t 5t'
>
> and here my /etc/config/wireless:
>
> config wifi-device 'radio0'
>         option type 'mac80211'
>         option channel '11'
>         option hwmode '11g'
>         option path 'platform/ath9k'
>         option htmode 'HT20'
>         option country 'DE'
>         option txpower '20'
>
> config wifi-iface
>         option device 'radio0'
>         option mode 'ap'
>         option network 'lan'
>         option encryption 'wpa2'
>         option auth_server '192.168.20.3'
>         option auth_port '1812'
>         option auth_secret 'myverysecret'
>         option acct_server '192.168.20.3'
>         option acct_port '1813'
>         option acct_secret 'myverysecret'
>         option nasid 'wrt'
>         option hidden '1'
>         option ssid 'lucabertIntern'
>         option dynamic_vlan 2
>         option vlan_file /etc/config/hostapd.vlan
>         option vlan_tagged_interface eth0
>
> config wifi-iface
>         option device 'radio0'
>         option mode 'ap'
>         option network 'guestlan'
>         option encryption 'psk2'
>         option key 'anothersecret'
>         option ssid 'lucabert1'
>

Everything looks ok at first glance. You didn't paste the content of
/etc/config/hostapd.vlan but I suppose it is correctly configured, right?
_______________________________________________
openwrt-users mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users

Reply via email to