Alcatel Unleashed

... Authentication Failure Reason = -,
Authentication Retry Count = 0,
Authentication Server IP Used = 172.28.0.112,
Authentication Server Used = Freeradius,
Server Reply-Message = -,
Profile = Labor,
Profile Source = Auth - Pass - Server UNP,
Profile From Auth Server = Labor,
Session Timeout = 0 ...

Ok, as mentioned I‘m using Daloradius Web GUI with mariadb together with FreeRadius. Unfortunately I can create a profil for automatic vlan assignment on Web Interface but there is no attribute Filter-id, I only find Tunnel Private Group Id.
It is really frustrating 😔 no idea if I can use unp profile ...

Ok Silvio, understand.
Just let me check whether it‘s possible to use filter-id as an
Attribute in my Freeradius Daloradius Web-Gui.

Thanks
Thomas

... ID 1 is direct vlan.
This is possible too - but not recommended by me. F.e. you send the id 1 (means vlan 1) you need to create a unp profile "1" mapped to vlan 1.
better is to use filter-id. Here an example from an user.conf (freeradius):

user-xyz user-password == "xyz...."
Filter-id = ACCOUNTS

Hi Silvio,
i´ve installed the following attributes on Freeradius for Profile VLAN 1:

Tunnel-Type 13 = reply
Tunnel-Medium-Type 6 = reply
Tunnel-Private-Group-ID 1 = reply

The Tunnel-Private-ID should be the Filter-ID. All those attributes are from dictionary.rfc.2868 on Freeradius server.
First and ...

Hi Silvio,
you`re correct with MAC address, after I configured address without delimeter in format 207BD2A3C275 on freeradius I got a:

Login OK: [207BD2A3C275] (from client private-network-1 port 1001 cli 207BD2A3C275)

But I still get no VLAN ID on that port, will check this with your ...

check the output of "show unp user details"

My prefered config is:

aaa radius-server 'Freeradius' host 1.2.3.4 key xxxxxxxx
aaa profile "AAA_1"
aaa profile "AAA_1" device-authentication 802.1x "Freeradius“
aaa profile "AAA_1" device-authentication mac "Freeradius“
unp profile 'ACCOUNTS'
unp profile ...

Hi guys,
we´ve decided to use freeradius instead of MacMon. Therefore I´ve got installed a freeradius server with Daloradius Web-Frontend. Everything ist running well. WLAN user authentication is configured with username/password on freeradius, all ist good.
Now I want to authenticate a laptop via MAB ...

Hello,
i'm using radius authentication (freeradius) on OS6250 and OS6450 and i can see on log this kind of message :

Login OK: [E0CCF85D9BC4/E0CCF85D9BC4] (from client Switch-SW023 port 77 cli e0ccf85d9bc4)
Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject ...

... However, when the Omniswitch presents the station MAC address, there is no delimiter, and cannot authenticate to the existing RADIUS server (FreeRadius 3.x).

As I see it, my options are:
--I can use unlang to alter the presentation, but not without affecting other authentication mechanisms. This ...