«

Hi all,

I'm using
- Cisco ACS 3.0 Radius
aaa server type is CiscoSecure ACS for Windows 2000/NT
authenticating using RADIUS (IETF)

- Cisco Switch 3550 Version 12.1(12c)EA1
aaa new-model
aaa authentication dot1x default group radius
aaa authorization network defauft group radius
radius-server host x.x.x.x auth-port 1812 acct-port 1813
radius-server retransmit 3
radius-server key xxxxxx
interface FastEthernet0/47
switchport mode access
no ip address
no cdp enable
dot1x port-control auto
spanning-tree portfast

- Win XP client
MD-5

My problem
The client will get authorized and the port will be authorized,
however Radius doesn't pass the vlan, the port ends up on the default
vlan.
How do I make it to pass the vlan, I have all 3 attributes set on
radius
64 Tunnel type = VLAN contains the value vlan (type
13)
65 Tunnel-medium-type=802 contains value 802 (type 6)
81 Tunnel-private-group-ID=VLAN name contains the vlan name assigned
to the 802.1x

But I still have no vlan assigned for the authorized port.
Any suggestions ?

Also, does anyone know what is the best IOS ver to run on a 3550 to do
802.1x
Thanks
Jean

Jean wrote:
> interface FastEthernet0/47
> switchport mode access
> no ip address
> no cdp enable
> dot1x port-control auto
> spanning-tree portfast
>
customize the timeout:

dot1x timeout quiet-period 5
dot1x timeout tx-period 4
dot1x timeout reauth-period 15
dot1x timeout supp-timeout 5
dot1x timeout server-timeout 5
dot1x max-req 5
dot1x guest-vlan 5

> - Win XP client
> MD-5
>
> My problem
> The client will get authorized and the port will be authorized,
> however Radius doesn't pass the vlan, the port ends up on the default
> vlan.
> How do I make it to pass the vlan, I have all 3 attributes set on
> radius
> 64 Tunnel type = VLAN contains the value vlan (type
> 13)
> 65 Tunnel-medium-type=802 contains value 802 (type 6)
> 81 Tunnel-private-group-ID=VLAN name contains the vlan name assigned
> to the 802.1x

not use VLAN name but VLAN number

>
> But I still have no vlan assigned for the authorized port.

have you create the vlan on 3550?
the commmand "debug dot1x ..."

> Any suggestions ?
>
> Also, does anyone know what is the best IOS ver to run on a 3550 to do
> 802.1x
the latest 121-20.EA2.bin
> Thanks
> Jean