FreeRADIUS Filter-Id Lab: Per-User ACLs on a Cisco Switch
Built in my home lab: FreeRADIUS returns Filter-Id, IOSv-L2 binds a local ACL to one 802.1X session, and a missing attribute quietly gives full access.
FreeRADIUS
The open-source RADIUS server behind the 802.1X labs. Articles tagged FreeRADIUS cover users, clients, EAP method setup and reading the server log when authentication fails.
Latest posts
802.1X Dynamic VLAN Assignment Not Working: FreeRADIUS Lab
Trace a FreeRADIUS VLAN typo from Access-Accept to an unauthorized Cisco port. Compare sessions, syslog, pings, and Zeek, then verify the fix.
802.1X Shared Secret Mismatch: A FreeRADIUS Lab
Reproduce one switch-side RADIUS key mismatch on IOSv-L2. Compare formal authorization, FreeRADIUS drops and captures on both links, then restore the key and verify EAP-TLS and bidirectional traffic.
MAB with FreeRADIUS on Cisco: MAC Authentication Bypass Without ISE
MAB with no ISE node and no license: FreeRADIUS 3.2.7 against a Catalyst 9000v, with the freeradius -X trail that proves MAB is bare PAP, the MAC format everyone gets wrong, and a real Method: mab / Authc Success on a live switchport.
802.1X with FreeRADIUS on Cisco: The Full Lab, No ISE Required
Every 802.1X guide assumes you have Cisco ISE. You do not need it. Here is the whole chain built on FreeRADIUS and a Catalyst 9000v, with real Access-Accept output, a port flipping to Authorized, and the CML switch image that silently wastes your evening.