Can someone explain about Microsoft IAS attributes?

[vpmorozov]

Hi, world!

I'm not able to startup wired 802.1x VLAN assignment throught MS IAS. After authorization port stay in default (access) VLAN.

I've configured attributes according to MS well and looks like I've configured something wrong.

Can someone say, what values should be in fields "Vendor Code", "Vendor-assignment nubmer attribute", "Attribute format" and "Attribute Value"?

Now I have:

RADIUS standard - 64 - string - VLAN

RADIUS standard - 65 - string - 802

RADIUS standard - 81 - string - 10

where 10 is VLAN number.

That does not work.

Thank you!

[darpotter]

Hi

You're referring to Vendor Specfic Attributes (or VSAs) and you shouldnt need any to make 802.1x work.

Your attribute above look ok.

Does IAS say authentications are passing or failing?

[vpmorozov]

Hi!

IAS auth passing. Yesterday I made it work with standart types (tunnel-type=VLAN etc), but anyway I wonder how to do it with vendor-specific attributes.

Vlad.

[jafrazie]

There's not a way to do this with VSAs. BTW, the ability to do this depends on your switch and code revision. This functionality is effectively achieved by compliance to RFC 2868 and RFC 3580.

So is everything working for you now?

Hope this helps,