topic RE: Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC in ExtremeCloud IQ- Site Engine Management Center

Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC

Justsomebodi — Wed, 10 Jan 2018 00:13:00 GMT

Hi All

Does anyone know why my Radius authenticated users has an unknown VLAN in the switch logs? It does not happen this way on a G1.

Network Login 802.1x user host/justsomebloke logged in MAC F0:C7:19:5E:26:C9 port x:x VLAN(s) "<unknown>", authentication Radius

Thanks

RE: Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC

Ronald_Dvorak — Wed, 10 Jan 2018 00:31:00 GMT

Because it's justsomebloke and not a real user...... or because the configuration is different on the devices.

Does the RADIUS provide the VLAN ID and if that is the case is the configuration on the RADIUS the same for both devices - same rule action - check the RADIUS log.

RE: Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC

Justsomebodi — Wed, 10 Jan 2018 00:31:00 GMT

It is the same radius server and the same EAC engine. The only difference is the switch type.

RE: Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC

Justsomebodi — Wed, 10 Jan 2018 00:31:00 GMT

Also it is a real user.

RE: Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC

Ronald_Dvorak — Wed, 10 Jan 2018 01:15:00 GMT

OK so Extreme Control is also included - how about the switch settings in Control - are they the same for the switches in the Policy/VLAN column...

RE: Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC

Justsomebodi — Wed, 10 Jan 2018 01:18:00 GMT

Yep Extreme Policy is set for both.

RE: Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC

OscarK — Wed, 10 Jan 2018 14:28:00 GMT

If the vlan attribute is returned as a policy you will see unknown vlan in the switch log. As the switch only sees a policy being returned and not a Vlan VSA. the vlan is applied by policy and not by login.

RE: Network Login 802.1x user VLAN(s) "unknown" on 460 G2 switch with EAC

Karthik_Mohando — Wed, 10 Jan 2018 21:28:00 GMT

addition to Oscar's point
https://gtacknowledge.extremenetworks.com/articles/Q_A/show-log-display-VLANs-unknown