Hello David,
for that you can use the radius filter to add on the fly the additional
attribute.
[mac]
filter = mac
operator = is
value = 00:11:22:33:44:55
[1:mac]
scope = returnRadiusAccessAccept
merge_answer = yes
answer1 = Egress-VLANID => 22
If the mac is 00:11:22:33:44:55 then add Egress-VLANID = 22 attribute in
the reply.
Regards
Fabrice
Le 19-05-07 à 15 h 25, David Magda via PacketFence-users a écrit :
Hello,
Is there support in packetfence-8.3.0-1.el7.noarch to return Egress-VLANID
attributes in RADIUS Access-Accept responses? (In addition to RFC3576/3580
Tunnel-* stuff.)
There seems to be some code in
pf/lib/pf/Switch.pm:enablePortConfigAsTrunk() and
pf/lib/pf/floatingdevice.pm:enablePortConfig() that mentions tagged ports.
We have some (portable) mini-switches that we'd like to trunk multiple
VLANs to (perhaps per §25.1), but also some workstations that need tagging
as well. Our current software allows for custom reply attributes, and I'm
wondering if we can recreate this with PF.
Thanks for any info.
Regards,
David
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
