Re: Tag and Untag a port in several VLAN
Fabien COMBERNOUS wrote: [...] So i used the other possibility with Egress-VLAN-Name instead of Egress-VLANID. It is easier to understand the meaning of the value and it works with my version of FreeRadius. About the dynamic vlan assignment i use the two methods explained in [1] : - some ports are single untaged vlan : all works fine. - some ports are multiple tagged and untagged vlan : the ports of the switch looks tagged and untagged as expected but the packets are not rooted as expected. The input packets are not transmited to the output expected. I tagged and untagged manually some others ports similarly to my sql backend and all packets are well routed. In the single untagged vlan method, 3 parameters are needed. In the multiple tagged/untagged vlan method i used only several times Egress-VLAN-Name. Is it necessary to use an other parameter in the sql backend other than Egress-VLAN-Name ? [1] http://wiki.freeradius.org/HP Thank you for your help. -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com http://www.kezia.com/ *Tel: +33 (0) 467 992 986* Kezia Group - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Tag and Untag a port in several VLAN
On Aug 4, 2010, at 1:01 AM, Fabien COMBERNOUS wrote: Fabien COMBERNOUS wrote: [...] So i used the other possibility with Egress-VLAN-Name instead of Egress-VLANID. It is easier to understand the meaning of the value and it works with my version of FreeRadius. About the dynamic vlan assignment i use the two methods explained in [1] : - some ports are single untaged vlan : all works fine. - some ports are multiple tagged and untagged vlan : the ports of the switch looks tagged and untagged as expected but the packets are not rooted as expected. The input packets are not transmited to the output expected. I tagged and untagged manually some others ports similarly to my sql backend and all packets are well routed. In the single untagged vlan method, 3 parameters are needed. In the multiple tagged/untagged vlan method i used only several times Egress-VLAN-Name. Is it necessary to use an other parameter in the sql backend other than Egress-VLAN-Name ? To answer your question no, only a single attribute is required. This isn't a FreeRADIUS question, please contact me off list at arran.cudbard-b...@hp.com with a statement of what you're trying to accomplish and the model numbers and firmware revisions of your switches. Regards, Arran [1] http://wiki.freeradius.org/HP Thank you for your help. -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com http://www.kezia.com/ *Tel: +33 (0) 467 992 986* Kezia Group - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tag and Untag a port in several VLAN
Hi there,
I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with
sql backend.
To untag a port of the switch in a VLAN works well.
But in some case i need to tag a port in several VLAN. In the wiki [1]
it looks possible. By following indicated in the wiki i inserted the
followind data in my sql backend :
insert into radgroupreply(groupname,attribute,op,value) values
('AP_test','Egress-VLANID',':=','0x320007');
insert into radgroupreply(groupname,attribute,op,value) values
('AP_test','Egress-VLANID',':=','0x32000102');
But when i plug the equipment radius give this debug :
[sql1] expand: SELECT id, groupname, attribute, value,
op FROM radgroupreply WHERE groupname =
'%{Sql-Group}' ORDER BY id - SELECT id, groupname,
attribute, value, op FROM radgroupreply
WHERE groupname = 'test' ORDER BY id
rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute
Egress-VLANID
What am i missing or misunderstanding ?
Help is welcome.
Best regards,
[1] http://wiki.freeradius.org/HP
--
*Fabien COMBERNOUS*
/unix system engineer/
www.kezia.com http://www.kezia.com/
*Tel: +33 (0) 467 992 986*
Kezia Group
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Tag and Untag a port in several VLAN
Fabien COMBERNOUS wrote:
I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with
sql backend.
...
But when i plug the equipment radius give this debug :
[sql1] expand: SELECT id, groupname, attribute, value,
op FROM radgroupreply WHERE groupname =
'%{Sql-Group}' ORDER BY id - SELECT id, groupname,
attribute, value, op FROM radgroupreply
WHERE groupname = 'test' ORDER BY id
rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute
Egress-VLANID
What am i missing or misunderstanding ?
The hex value isn't accepted in 2.1.3. You'll need to run 2.1.6 or later.
Or, change the hex number to a decimal number.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Tag and Untag a port in several VLAN
Alan DeKok wrote:
Fabien COMBERNOUS wrote:
I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with
sql backend.
...
But when i plug the equipment radius give this debug :
[sql1] expand: SELECT id, groupname, attribute, value,
op FROM radgroupreply WHERE groupname =
'%{Sql-Group}' ORDER BY id - SELECT id, groupname,
attribute, value, op FROM radgroupreply
WHERE groupname = 'test' ORDER BY id
rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute
Egress-VLANID
What am i missing or misunderstanding ?
The hex value isn't accepted in 2.1.3. You'll need to run 2.1.6 or later.
Or, change the hex number to a decimal number.
Thank you for your answer.
I can't change FreeRadius version. So i need to use decimal number.
Can you give me an exemple about to untag a port in vlan 7 ?
Best regards,
--
*Fabien COMBERNOUS*
/unix system engineer/
www.kezia.com http://www.kezia.com/
*Tel: +33 (0) 467 992 986*
Kezia Group
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Tag and Untag a port in several VLAN
Fabien COMBERNOUS wrote: I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ? Convert the hex number to a decimal number. There are tools available to help you do this. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Tag and Untag a port in several VLAN
On 2010/08/03 01:51 PM, Fabien COMBERNOUS wrote: Thank you for your answer. I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ? Just convert 0x320007 to decimal?? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Tag and Untag a port in several VLAN
On 2010/08/03 01:51 PM, Fabien COMBERNOUS wrote: Thank you for your answer. I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ? Just convert 0x320007 to decimal?? No. Just a correct example in hexa to untag in vlan 7. I'll translate in decimal. Thank you for your help. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Tag and Untag a port in several VLAN
Alan DeKok wrote:
Fabien COMBERNOUS wrote:
I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with
sql backend.
...
But when i plug the equipment radius give this debug :
[sql1] expand: SELECT id, groupname, attribute, value,
op FROM radgroupreply WHERE groupname =
'%{Sql-Group}' ORDER BY id - SELECT id, groupname,
attribute, value, op FROM radgroupreply
WHERE groupname = 'test' ORDER BY id
rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute
Egress-VLANID
What am i missing or misunderstanding ?
The hex value isn't accepted in 2.1.3. You'll need to run 2.1.6 or later.
Or, change the hex number to a decimal number.
So i used the other possibility with Egress-VLAN-Name instead of
Egress-VLANID.
It is easier to understand the meaning of the value and it works with my
version of FreeRadius.
Thank you for your help.
--
*Fabien COMBERNOUS*
/unix system engineer/
www.kezia.com http://www.kezia.com/
*Tel: +33 (0) 467 992 986*
Kezia Group
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
