topic Assign VLAN from freeradius to Cisco 3550 Switch in Network Access Control https://community.cisco.com/t5/network-access-control/assign-vlan-from-freeradius-to-cisco-3550-switch/m-p/1905642#M240872 <HTML><HEAD></HEAD><BODY><P>I believe you should be using the numerical values in your fields, look at this one :</P><P></P><P><A class="jive-link-external-small" href="http://www.scribd.com/doc/75788651/52/X-with-VLAN-Assignment">http://www.scribd.com/doc/75788651/52/X-with-VLAN-Assignment</A></P><P></P><P>Tunnel-Medium-Type:1 = 6</P><P>Tunnel-Type:1 = 13</P><P>Tunnel-Private-Group-Id:1 = <VLAN name="" not="" number=""></VLAN></P></BODY></HTML> Wed, 25 Apr 2012 17:15:00 GMT jan.nielsen 2012-04-25T17:15:00Z Assign VLAN from freeradius to Cisco 3550 Switch https://community.cisco.com/t5/network-access-control/assign-vlan-from-freeradius-to-cisco-3550-switch/m-p/1905641#M240820 <P>Hi All,</P><P></P><P>I am trying to assign VLAN from freeradius to the a cisco 3550 switch but it's not working.</P><P></P><P>I keep getting those lines in the cisco switch debug:</P><P></P><P>3w6d: RADIUS:&nbsp; Tunnel-Medium-Type&nbsp; [65]&nbsp; 6&nbsp;&nbsp; 01:Unsupported&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [6]</P><P>3w6d: RADIUS:&nbsp; Tunnel-Type&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [64]&nbsp; 6&nbsp;&nbsp; 01:Unsupported&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [13]</P><P></P><P>What does it mean? Any idea how to solve this?</P><P></P><P>Below freeradius conf and switch debug.</P><P></P><P>Thanks.</P><P></P><P><STRONG style="text-decoration: underline; ">Configuration on freeradius users file:</STRONG></P><P></P><P>wassim&nbsp;&nbsp;&nbsp; Cleartext-Password := "wassim"</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Tunnel-Medium-Type:1 = IEEE-802,</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Tunnel-Type:1 = VLAN,</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Tunnel-Private-Group-Id:1 = 100 </P><P></P><P></P><P><STRONG style="text-decoration: underline; ">Cisco Switch debug log:</STRONG></P><P></P><P>3w6d: RADIUS:&nbsp; authenticator 99 15 53 A6 AB B7 0B 75 - 9F A7 5F 27 8F F1 2E 67</P><P>3w6d: RADIUS:&nbsp; NAS-IP-Address&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [4]&nbsp;&nbsp; 6&nbsp;&nbsp; 192.168.1.8&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>3w6d: RADIUS:&nbsp; NAS-Port&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [5]&nbsp;&nbsp; 6&nbsp;&nbsp; 50023&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>3w6d: RADIUS:&nbsp; NAS-Port-Type&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [61]&nbsp; 6&nbsp;&nbsp; Eth&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [15]</P><P>3w6d: RADIUS:&nbsp; User-Name&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [1]&nbsp;&nbsp; 8&nbsp;&nbsp; "wassim"</P><P>3w6d: RADIUS:&nbsp; Called-Station-Id&nbsp;&nbsp; [30]&nbsp; 19&nbsp; "00-15-F9-F8-4E-97"</P><P>3w6d: RADIUS:&nbsp; Calling-Station-Id&nbsp; [31]&nbsp; 19&nbsp; "00-1A-80-3F-F6-A1"</P><P>3w6d: RADIUS:&nbsp; Service-Type&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [6]&nbsp;&nbsp; 6&nbsp;&nbsp; Framed&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [2]</P><P>3w6d: RADIUS:&nbsp; Framed-MTU&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [12]&nbsp; 6&nbsp;&nbsp; 1500&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>3w6d: RADIUS:&nbsp; State&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [24]&nbsp; 18&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; DB C1 1C E7 DE C7 09 5E 75 5E 5B 0F 23 3A 54 E7&nbsp; [???????^u^[?#:T?]</P><P>3w6d: RADIUS:&nbsp; EAP-Message&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [79]&nbsp; 69&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; 02 06 00 43 15 00 17 03 01 00 38 BF 71 FC FA 04&nbsp; [???C??????8?q???]</P><P>3w6d: RADIUS:&nbsp;&nbsp; BE DC FD CC 03 D2 7F 8B 09 63 2C B2 AE D8 AC 61&nbsp; [?????????c,????a]</P><P>3w6d: RADIUS:&nbsp;&nbsp; 64 21 2B 00 ED 0E 6E E8 B0 49 50 6B 99 B8 88 A4&nbsp; [d!+???n??IPk????]</P><P>3w6d: RADIUS:&nbsp;&nbsp; 36 C6 FD B9 F0 77 2D 82 28 0A 37 D1 D4 73 B4 59&nbsp; [6????w-?(?7??s?Y]</P><P>3w6d: RADIUS:&nbsp;&nbsp; F9 37 E6&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [?7?]</P><P>3w6d: RADIUS:&nbsp; Message-Authenticato[80]&nbsp; 18&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; A2 59 A3 DE A6 98 5F 78 25 12 59 BB 4D B8 74 F0&nbsp; [?Y????_x??Y?M?t?]</P><P>3w6d: RADIUS: Received from id 1645/123 192.168.1.57:1812, Access-Accept, len 186</P><P>3w6d: RADIUS:&nbsp; authenticator C0 31 7F D7 A6 D4 1F C8 - 27 AA F0 99 EA 1F 92 C3</P><P>3w6d: RADIUS:&nbsp; Tunnel-Medium-Type&nbsp; [65]&nbsp; 6&nbsp;&nbsp; 01:Unsupported&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [6]</P><P>3w6d: RADIUS:&nbsp; Tunnel-Type&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [64]&nbsp; 6&nbsp;&nbsp; 01:Unsupported&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [13]</P><P>3w6d: RADIUS:&nbsp; Tunnel-Private-Group[81]&nbsp; 6&nbsp;&nbsp; 01:"100"</P><P>3w6d: RADIUS:&nbsp; Vendor, Microsoft&nbsp;&nbsp; [26]&nbsp; 58&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; MS-MPPE-Recv-Key&nbsp;&nbsp; [17]&nbsp; 52&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; 86 8B 3E 74 76 E7 CB 9A 8F EF F5 9C 16 2E 88 1A&nbsp; [??&gt;tv????????.??]</P><P>3w6d: RADIUS:&nbsp;&nbsp; 12 3B 80 A6 E9 9B B6 6F E6 63 C8 AA B0 DB 0E 76&nbsp; [?;?????o?c?????v]</P><P>3w6d: RADIUS:&nbsp;&nbsp; 61 C1 6A 5D 62 BD 72 BE 78 C8 9D 4D A7 3F 54 35&nbsp; [a?j]b?r?x??M??T5]</P><P>3w6d: RADIUS:&nbsp;&nbsp; 40 DC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [@?]</P><P>3w6d: RADIUS:&nbsp; Vendor, Microsoft&nbsp;&nbsp; [26]&nbsp; 58&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; MS-MPPE-Send-Key&nbsp;&nbsp; [16]&nbsp; 52&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; 8A 61 97 87 78 FD CA 16 8D F0 ED 75 C0 70 93 AE&nbsp; [?a??x??????u?p??]</P><P>3w6d: RADIUS:&nbsp;&nbsp; 71 EF 5A 21 53 35 A4 88 F9 84 16 83 10 43 6E 9E&nbsp; [q?Z!S5???????Cn?]</P><P>3w6d: RADIUS:&nbsp;&nbsp; AB A7 8B 56 6C 42 0D AB 09 1D 82 D3 CB 7E 6C B8&nbsp; [???VlB???????~l?]</P><P>3w6d: RADIUS:&nbsp;&nbsp; 56 58&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [VX]</P><P>3w6d: RADIUS:&nbsp; EAP-Message&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [79]&nbsp; 6&nbsp;&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; 03 06 00 04&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [????]</P><P>3w6d: RADIUS:&nbsp; Message-Authenticato[80]&nbsp; 18&nbsp; </P><P>3w6d: RADIUS:&nbsp;&nbsp; 82 4B 64 0F 07 64 59 18 0F 27 07 95 A5 15 09 33&nbsp; [?Kd??dY??'?????3]</P><P>3w6d: RADIUS:&nbsp; User-Name&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [1]&nbsp;&nbsp; 8&nbsp;&nbsp; "wassim"</P><P>3w6d: RADIUS: EAP-login: length of eap packet = 4 </P><P>3w6d: RADIUS: Tunnel-MType, [01] 00 00 06</P><P>3w6d: RADIUS: TAS(1) created and enqueued.</P><P>3w6d: RADIUS: Tunnel-Type, [01] 00 00 0D</P><P>3w6d: RADIUS: Tunnel-GID, [01] 100</P><P>3w6d: RADIUS: unrecognized Microsoft VSA type 17</P><P>3w6d: RADIUS: unrecognized Microsoft VSA type 16</P><P>3w6d: RADIUS: TAS(1) takes precedence over tagged attributes, tunnel_type=vlan</P><P>3w6d: RADIUS: free TAS(1)</P><P>3w6d: RADIUS: no appropriate authorization type for user.</P><P>3w6d: RADIUS: Tunnel-MType, [01] 00 00 06</P><P>3w6d: RADIUS: TAS(1) created and enqueued.</P><P>3w6d: RADIUS: Tunnel-Type, [01] 00 00 0D</P><P>3w6d: RADIUS: unrecognized Microsoft VSA type 17</P><P>3w6d: RADIUS: unrecognized Microsoft VSA type 16</P><P>3w6d: RADIUS: TAS(1) takes precedence over tagged attributes, tunnel_type=vlan</P><P>3w6d: RADIUS: free TAS(1)</P><P>3w6d: RADIUS: no appropriate authorization type for user.</P><P>3w6d: RADIUS: Tunnel-MType, [01] 00 00 06</P><P>3w6d: RADIUS: TAS(1) created and enqueued.</P><P>3w6d: RADIUS: Tunnel-Type, [01] 00 00 0D</P><P>3w6d: RADIUS: unrecognized Microsoft VSA type 17</P><P>3w6d: RADIUS: unrecognized Microsoft VSA type 16</P><P>3w6d: RADIUS: TAS(1) takes precedence over tagged attributes, tunnel_type=vlan</P><P>3w6d: RADIUS: free TAS(1)</P><P>3w6d: RADIUS: no appropriate authorization type for user.</P><P>3w6d: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/23, changed state to up</P> Mon, 11 Mar 2019 02:02:15 GMT https://community.cisco.com/t5/network-access-control/assign-vlan-from-freeradius-to-cisco-3550-switch/m-p/1905641#M240820 navlink.lvmh 2019-03-11T02:02:15Z Assign VLAN from freeradius to Cisco 3550 Switch https://community.cisco.com/t5/network-access-control/assign-vlan-from-freeradius-to-cisco-3550-switch/m-p/1905642#M240872 <HTML><HEAD></HEAD><BODY><P>I believe you should be using the numerical values in your fields, look at this one :</P><P></P><P><A class="jive-link-external-small" href="http://www.scribd.com/doc/75788651/52/X-with-VLAN-Assignment">http://www.scribd.com/doc/75788651/52/X-with-VLAN-Assignment</A></P><P></P><P>Tunnel-Medium-Type:1 = 6</P><P>Tunnel-Type:1 = 13</P><P>Tunnel-Private-Group-Id:1 = <VLAN name="" not="" number=""></VLAN></P></BODY></HTML> Wed, 25 Apr 2012 17:15:00 GMT https://community.cisco.com/t5/network-access-control/assign-vlan-from-freeradius-to-cisco-3550-switch/m-p/1905642#M240872 jan.nielsen 2012-04-25T17:15:00Z Re: Assign VLAN from freeradius to Cisco 3550 Switch https://community.cisco.com/t5/network-access-control/assign-vlan-from-freeradius-to-cisco-3550-switch/m-p/3842511#M240911 <P>I combined your answer with what in&nbsp;<A href="https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/Tagging_Client_VLANs_with_RADIUS_Attributes" target="_blank">Tagging Client VLANs with RADIUS Attributes - Cisco Meraki</A>. And, it's working for me on a recent Cisco IOS-XE switch with:</P> <PRE>Tunnel-Type:1 = "VLAN", Tunnel-Medium-Type:1 = "IEEE-802", Tunnel-Private-Group-ID:1 = "Users"</PRE> <P>&nbsp;where Users is the name of VLAN configured on the switch.</P> Mon, 22 Apr 2019 15:22:50 GMT https://community.cisco.com/t5/network-access-control/assign-vlan-from-freeradius-to-cisco-3550-switch/m-p/3842511#M240911 hslai 2019-04-22T15:22:50Z