TLS / SSL negotiation fails when behind Cisco IP phone

2012-09-09 Thread Dan Lundström
Hi! We are using EAP/TLS for wired authentication on our networks, in one of our sites the SSL negotiation fails when the client is connected behind a Cisco 7962 IP phone. We have this same setup working on other sites. The phone model varies between the sites, but I cannot find any

RE: TLS / SSL negotiation fails when behind Cisco IP phone

2012-09-09 Thread Danner, Mearl
There is a switch in the Cisco phone. All my experience is with a 7945. There are some ethernet settings in the phone settings - under device configuration. They can be controlled locally and some are controlled in Cisco Call Manager. Might look there as a start. -Original Message-

RE: TLS / SSL negotiation fails when behind Cisco IP phone

2012-09-09 Thread Dan Lundström
I have been looking at possible changes to make on the phone and call manager, but cannot find anything that would relate to the behavior we have. Is there a way to change MTU value on the phones, I can't find it. We have the 7945 model on another site as well and there everything works, I

RE: TLS / SSL negotiation fails when behind Cisco IP phone

2012-09-09 Thread Dan Lundström
The problem was firmware, I works as expected with both older and newer versions. So basically don't use firmware version 8.5(2). Also might be good to know that all of the following phones use the same code base; IP Phones - 7906, 7911, 7931, 7941, 7942, 7945, 7961, 7962, 7965, 7970, 7971

RE: TLS / SSL negotiation fails when behind Cisco IP phone

2012-09-09 Thread Danner, Mearl
Good info if we start doing wired 802.1x Thanks -Original Message- From: freeradius-users-bounces+jmdanner=samford@lists.freeradius.org [mailto:freeradius-users-bounces+jmdanner=samford@lists.freeradius.org] On Behalf Of Dan Lundström Sent: Sunday, September 09, 2012 12:11 PM

RADGROUPREPLY QUERY NOT EXECUTED

2012-09-09 Thread Mada
Have tried several version builds on Centos 5.x - currently using FR 2.1.12 rlm_mysql stops after the group check query and does not execute the group reply query. 19:00:43 2012 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radreply Sun Sep 9 19:00:43 2012 : Info: [sql]

Re: RADGROUPREPLY QUERY NOT EXECUTED

2012-09-09 Thread Marinko Tarlac
Works fine for me... All centos versions, all FR versions since 1.1.3... On 9/9/2012 7:33 PM, Mada wrote: Have tried several version builds on Centos 5.x - currently using FR 2.1.12 rlm_mysql stops after the group check query and does not execute the group reply query. 19:00:43 2012 : Info:

Re: RADGROUPREPLY QUERY NOT EXECUTED

2012-09-09 Thread Arran Cudbard-Bell
On 9 Sep 2012, at 18:33, Mada m...@datacom.mw wrote: Have tried several version builds on Centos 5.x - currently using FR 2.1.12 rlm_mysql stops after the group check query and does not execute the group reply query. 19:00:43 2012 : Info: [sql] expand: SELECT id, username, attribute,

Re: RADGROUPREPLY QUERY NOT EXECUTED

2012-09-09 Thread Arran Cudbard-Bell
On 9 Sep 2012, at 20:39, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 9 Sep 2012, at 18:33, Mada m...@datacom.mw wrote: Have tried several version builds on Centos 5.x - currently using FR 2.1.12 rlm_mysql stops after the group check query and does not execute the group

Re: RADGROUPREPLY QUERY NOT EXECUTED

2012-09-09 Thread Fajar A. Nugraha
On Mon, Sep 10, 2012 at 12:33 AM, Mada m...@datacom.mw wrote: Have tried several version builds on Centos 5.x - currently using FR 2.1.12 rlm_mysql stops after the group check query and does not execute the group reply query. 19:00:43 2012 : Info: [sql] expand: SELECT id, username,