unidentified users and vlan assignment

2010-09-15 Thread Fabien COMBERNOUS
Hi, We use the freeradius to assigne users in the vlan. The default settings rejects users in case of a request from an unidentified user. Instead of this we would like assign him to a specific vlan. I don't find information about how to do this. Any pointer or

Re: unidentified users and vlan assignment

2010-09-15 Thread Phil Mayers
On 15/09/10 10:02, Fabien COMBERNOUS wrote: Hi, We use the freeradius to assigne users in the vlan. The default settings rejects users in case of a request from an unidentified user. Instead of this we would like assign him to a specific vlan. I don't find information about how to do this.

Re: unidentified users and vlan assignment

2010-09-15 Thread Fabien COMBERNOUS
Thank you Phil for your answer. On 15/09/2010 11:09, Phil Mayers wrote: Are you using 802.1x or macauth? If you are sending an access-reject, you can't assign a vlan. Reject means "give no service". You either need to send an accept

Re: unidentified users and vlan assignment

2010-09-15 Thread Phil Mayers
On 15/09/10 12:30, Fabien COMBERNOUS wrote: Thank you Phil for your answer. On 15/09/2010 11:09, Phil Mayers wrote: Are you using 802.1x or macauth? If you are sending an access-reject, you can't assign a vlan. Reject means give no service. You either need to send an accept with a vlan, or

Re: unidentified users and vlan assignment

2010-09-15 Thread Fabien COMBERNOUS
My sql module (we use an sql backend return notfound. I tried to add the following at the end of the authorize section. On 15/09/2010 16:30, Phil Mayers wrote: if (notfound) { update reply { Tunnel-Private-Group-Id = 1234

Re: unidentified users and vlan assignment

2010-09-15 Thread Fabien COMBERNOUS
We use a sql backend. Just after my sql module (in the authorise section) i added the following bloc. if (notfound) { update reply { Tunnel-Type := 13 Tunnel-Medium-Type := 6 Tunnel-Private-Group-ID := 42 }

Re: unidentified users and vlan assignment

2010-09-15 Thread Phil Mayers
On 15/09/10 16:13, Fabien COMBERNOUS wrote: We use a sql backend. Just after my sql module (in the authorise section) i added the following bloc. if (notfound) { update reply { Tunnel-Type := 13 Tunnel-Medium-Type := 6 Tunnel-Private-Group-ID := 42 } } When a user is unknown, the sql

Re: unidentified users and vlan assignment

2010-09-15 Thread Fabien COMBERNOUS
On 15/09/2010 17:29, Phil Mayers wrote: Please post the full debugging output. +- entering group authorize {...} ++[preprocess] returns ok [chap] Setting 'Auth-Type := CHAP' ++[chap] returns ok ++[mschap] returns noop [suffix]

Re: unidentified users and vlan assignment

2010-09-15 Thread Phil Mayers
On 15/09/10 16:49, Fabien COMBERNOUS wrote: On 15/09/2010 17:29, Phil Mayers wrote: Please post the full debugging output. Sigh. This is not the full debugging output. You're making it hard to help you. +- entering group authorize {...} ++[preprocess] returns ok [chap] Setting