Freeradius + 2 x LDAP + VLAN

[Miroslav Lednicky]

Dobry den,

mam zprovozneny Freeradius 2.1.10 navazany na 2 LDAP (ldap1 + ldap2) 
servery.

Slouzi pro overovani uzivatelu pres 802.1x.

Potreboval bych, aby uzivatele serveru ldap1 spadli do VLAN 1
a uzivatele LDAP 2 do VLAN 2. To se mi nedari nakonfigurovat.

Hledal jsem pres Google, ale nic poradneho nenasel.

v  /etc/freeradius/modules/ldap mam neco jako:

ldap ldap1 {

	server = 1.1.1.1
	basedn = ou=users,dc=test,dc=cz

}

ldap  ldap2 {

	server = 2.2.2.2
	basedn = ou=users,dc=test1,dc=cz

}

v /etc/freeradius/sites-enabled/inner-tunnel :

authorize {
	chap
	mschap
	unix
	suffix
	eap {
		ok=return
	}
	files
	ldap1
	ldap2
	expiration
	logintime
	pap
}

authenticate {
	Auth-Type PAP {
                 pap
         }

	Auth-Type CHAP {
                 chap
         }

	Auth-Type MS-CHAP {
                 mschap
         }

	Auth-Type LDAP1 {
                 ldap1
         }

         Auth-Type LDAP2 {
                 ldap2
         }
	eap
}

Overovani uzivatelu funguje.

Predavane radius atributy jsem se snazil nakonfigurovat v 
/etc/freeradius/users,

ale nepodarilo se mi zjistit, jak predat:

Tunnel-Type=VLAN,
Tunnel-Medium-Type=IEEE-802,
Tunnel-Private-Group-Id=1

uzivatelum serveru LDAP1

a

Tunnel-Type=VLAN,
Tunnel-Medium-Type=IEEE-802,
Tunnel-Private-Group-Id=2

uzivatelum serveru LDAP2

Diky za kazdou radu,

Miroslav Lednicky