Pfsense FreeRadius VLANs per MAC zuweisen

 Received Access-Request Id 1 from 192.168.9.17:57330 to 192.168.9.1:1812 length 161
(0)   User-Name = "4C526224E36D"  
(0)   Service-Type = Call-Check
(0)   Called-Station-Id = "24:5a:4c:12:17:3f"  
(0)   Calling-Station-Id = "4c:52:62:24:e3:6d"  
(0)   NAS-Port = 34
(0)   NAS-Port-Id = "Gigabitethernet 0/34"  
(0)   Framed-MTU = 1500
(0)   NAS-Port-Type = Ethernet
(0)   EAP-Message = 0x0200001101344335323632323445333644
(0)   NAS-IP-Address = 192.168.9.17
(0)   Message-Authenticator = 0x39f1f73ff69b419eb3c70d7a169c79cb
(0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
(0)   authorize {
(0)     [preprocess] = ok
(0)     [chap] = noop
(0)     [mschap] = noop
(0)     [digest] = noop
(0) suffix: Checking for suffix after "@"  
(0) suffix: No '@' in User-Name = "4C526224E36D", skipping NULL due to config.  
(0)     [suffix] = noop
(0) ntdomain: Checking for prefix before "\"  
(0) ntdomain: No '\' in User-Name = "4C526224E36D", skipping NULL due to config.  
(0)     [ntdomain] = noop
(0) eap: Peer sent EAP Response (code 2) ID 0 length 17
(0) eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize  
(0)     [eap] = ok
(0)   } # authorize = ok
(0) Found Auth-Type = eap
(0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
(0)   authenticate {
(0) eap: Peer sent packet with method EAP Identity (1)
(0) eap: Calling submodule eap_md5 to process data
(0) eap_md5: Issuing MD5 Challenge
(0) eap: Sending EAP Request (code 1) ID 1 length 22
(0) eap: EAP session adding &reply:State = 0xbdb22fe8bdb32b2c
(0)     [eap] = handled
(0)   } # authenticate = handled
(0) Using Post-Auth-Type Challenge
(0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
(0)   Challenge { ... } # empty sub-section is ignored
(0) Sent Access-Challenge Id 1 from 192.168.9.1:1812 to 192.168.9.17:57330 length 80
(0)   EAP-Message = 0x010100160410e7a13dd7ee2e3ce9190f76fe3bd57e6b
(0)   Message-Authenticator = 0x00000000000000000000000000000000
(0)   State = 0xbdb22fe8bdb32b2c72c518a33ab01589
(0) Finished request
Waking up in 4.9 seconds.
(1) Received Access-Request Id 2 from 192.168.9.17:57330 to 192.168.9.1:1812 length 184
(1)   User-Name = "4C526224E36D"  
(1)   Service-Type = Call-Check
(1)   Called-Station-Id = "24:5a:4c:12:17:3f"  
(1)   Calling-Station-Id = "4c:52:62:24:e3:6d"  
(1)   NAS-Port = 34
(1)   NAS-Port-Id = "Gigabitethernet 0/34"  
(1)   Framed-MTU = 1500
(1)   NAS-Port-Type = Ethernet
(1)   State = 0xbdb22fe8bdb32b2c72c518a33ab01589
(1)   EAP-Message = 0x0201001604102caaba41d5b50f5e3b6ea5dbe6617921
(1)   NAS-IP-Address = 192.168.9.17
(1)   Message-Authenticator = 0x7be96e3de48df62ec0bc0e2ab8c1039c
(1) session-state: No cached attributes
(1) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
(1)   authorize {
(1)     [preprocess] = ok
(1)     [chap] = noop
(1)     [mschap] = noop
(1)     [digest] = noop
(1) suffix: Checking for suffix after "@"  
(1) suffix: No '@' in User-Name = "4C526224E36D", skipping NULL due to config.  
(1)     [suffix] = noop
(1) ntdomain: Checking for prefix before "\"  
(1) ntdomain: No '\' in User-Name = "4C526224E36D", skipping NULL due to config.  
(1)     [ntdomain] = noop
(1) eap: Peer sent EAP Response (code 2) ID 1 length 22
(1) eap: No EAP Start, assuming it's an on-going EAP conversation  
(1)     [eap] = updated
(1) files: users: Matched entry 4C526224E36D at line 168
(1)     [files] = ok
(1)     if ((notfound || noop) && ("%{%{Control:Auth-Type}:-No-Accept}" != "Accept")) {  
(1)     if ((notfound || noop) && ("%{%{Control:Auth-Type}:-No-Accept}" != "Accept"))  -> FALSE  
rlm_counter: Entering module authorize code
rlm_counter: Could not find Check item value pair
(1)     [daily] = noop
rlm_counter: Entering module authorize code
rlm_counter: Could not find Check item value pair
(1)     [weekly] = noop
rlm_counter: Entering module authorize code
rlm_counter: Could not find Check item value pair
(1)     [monthly] = noop
rlm_counter: Entering module authorize code
rlm_counter: Could not find Check item value pair
(1)     [forever] = noop
(1)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
(1)     ERROR: Failed retrieving values required to evaluate condition
(1)     [expiration] = noop
(1)     [logintime] = noop
(1) pap: WARNING: Auth-Type already set.  Not setting to PAP
(1)     [pap] = noop
(1)   } # authorize = updated
(1) Found Auth-Type = eap
(1) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
(1)   authenticate {
(1) eap: Expiring EAP session with state 0xbdb22fe8bdb32b2c
(1) eap: Finished EAP session with state 0xbdb22fe8bdb32b2c
(1) eap: Previous EAP request found for state 0xbdb22fe8bdb32b2c, released from the list
(1) eap: Peer sent packet with method EAP MD5 (4)
(1) eap: Calling submodule eap_md5 to process data
(1) eap: Sending EAP Success (code 3) ID 1 length 4
(1) eap: Freeing handler
(1)     [eap] = ok
(1)   } # authenticate = ok
(1) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
(1)   post-auth {
(1)     update {
(1)       No attributes updated for RHS &session-state:
(1)     } # update = noop
(1)     [exec] = noop
(1)     policy remove_reply_message_if_eap {
(1)       if (&reply:EAP-Message && &reply:Reply-Message) {
(1)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
(1)       else {
(1)         [noop] = noop
(1)       } # else = noop
(1)     } # policy remove_reply_message_if_eap = noop
(1)   } # post-auth = noop
(1) Login OK: [4C526224E36D] (from client EFS-Switch-RZ-01 port 34 cli 4c:52:62:24:e3:6d)
(1) Sent Access-Accept Id 2 from 192.168.9.1:1812 to 192.168.9.17:57330 length 58
(1)   EAP-Message = 0x03010004
(1)   Message-Authenticator = 0x00000000000000000000000000000000
(1)   User-Name = "4C526224E36D"  
(1) Finished request
Waking up in 4.9 seconds.