Re: Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Alan DeKok
Joel MBA OYONE wrote: So if SSID friend is assigned to VLAN 100, the end-user will associate with that SSID, right?? No. VLAN assignment is after SSID association, and after 802.1x authentication. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re : Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Joel MBA OYONE
Alan DeKok. wrote: No. VLAN assignment is after SSID association, and after 802.1x authentication. OK, is it possible to associate in SSID_1 and be assigned to a different VLAN than the we are associated in ? (exemple, when i am associated to SSID_1, which belongs to VLAN100, RADIUS

Re: Re : Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Alan DeKok
Joel MBA OYONE wrote: No. VLAN assignment is after SSID association, and after 802.1x authentication. OK, is it possible to associate in SSID_1 and be assigned to a different VLAN than the we are associated in ? That doesn't make sense. SSID's aren't tied to VLANs, unless you configure

Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Joel MBA OYONE
Alan, I possess a device from D-Link (DWS-3024). it is a wireless switch controler, and the documentation says that: - One SSID has to be affect to one VLAN on the profile. - An Access point could be configured with up to 8 ifferent SSIDs and it is possible to affect each SSID on its own

Re: Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Joe Vieira
HI Joel, I think the issue here is that the D-Link AP's you have are rather limited. Radius can not ever assign an SSID because that step occurs before the user authenticated. Wireless starts with an association from the user to the AP's SSID from there the AP decides what needs to

Re : Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Joel MBA OYONE
Thank you Joe for your answer! We all agree that assocation is made before authentication process, in order to RADIUS to be able to do its stuffs. but the fact is that it doesn't work, and i was wondering what would be the result if i set: Tunnel-Private-Group-ID = 100 (when the SSID were i am

Re: Re : Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Alan DeKok
Joel MBA OYONE wrote: We all agree that assocation is made before authentication process, in order to RADIUS to be able to do its stuffs. but the fact is that it doesn't work, Then your NAS is broken. Buy a real NAS that supports VLAN assignment. and i was wondering what would be the

Re : Re : Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Joel MBA OYONE
, 17h37mn 46s Objet : Re: Re : Re : Dynamic VLAN and FreeRadius Joel MBA OYONE wrote: We all agree that assocation is made before authentication process, in order to RADIUS to be able to do its stuffs. but the fact is that it doesn't work, Then your NAS is broken. Buy a real NAS that supports VLAN

Re : Re : Re : Dynamic VLAN and FreeRadius

2008-05-22 Thread Joel MBA OYONE
Um... i think i just sent an empty response, sorry about that and thank you for this clear explanation. i just will change my NAS! (but i will call d-link before ). see ya! Joel MBA OYONE wrote: We all agree that assocation is made before authentication process, in order to RADIUS to be

Re: Dynamic VLAN and FreeRadius

2008-05-21 Thread A . L . M . Buxey
Hi, I am trying to get the RADIUS server to not only authenticating the supplicant, but providing the NAS with a VLAN ID. I have tried certain resources and haven't been able to receive the VLAN ID. Can any provide any help in this area? depends on your NAR - you need to send back the

Re: Dynamic VLAN and FreeRadius

2008-05-20 Thread Michael Schwartzkopff
William E. Russell schrieb: All, I am trying to get the RADIUS server to not only authenticating the supplicant, but providing the NAS with a VLAN ID. I have tried certain resources and haven't been able to receive the VLAN ID. Can any provide any help in this area? Thanks William