Tac is looking into to now.  Traffic is passing and we get dhcp addresses, but no auth/login page.  We are not using the client on this network. It's an OPEN Hotspot for students and visitors



Dave P



-----Original Message-----

From: Cisco Clean Access Users and Administrators [mailto:[log in to unmask]] On Behalf Of Sidney Eaton

Sent: Wednesday, October 25, 2006 1:07 PM

To: [log in to unmask]

Subject: Re: L3 Multihop mode?



Sorry about that part yes we have static routes pointing to the other 

router behind CCA.  All subnets on that router are CCA so we are true 

multihop layer 3 but Mahabub is correct you must have policy routing if 

you are doing true multihop L3.  We do not have a managed subnet and have 

configured the server for DHCP passthrough (it is a virtual gateway).



Sincerely,

Sidney Eaton

Network Technician/Programmer

Ferris State University

205 West Building

Big Rapids, Mi 49307

(231) 591-5388

For Support Call (231) 591-4822 or www.ferris.edu/tac







Dave Packham <[log in to unmask]> 

Sent by: Cisco Clean Access Users and Administrators 

<[log in to unmask]>

10/25/2006 11:32 AM

Please respond to

Cisco Clean Access Users and Administrators 

<[log in to unmask]>





To

[log in to unmask]

cc



Subject

Re: L3 Multihop mode?













Do you have a managed subnet for each?  Does your CAS do dhcp with an 

iphelper?



Dave P



-----Original Message-----

From: Cisco Clean Access Users and Administrators 

[mailto:[log in to unmask]] On Behalf Of Sidney Eaton

Sent: Wednesday, October 25, 2006 7:18 AM

To: [log in to unmask]

Subject: Re: L3 Multihop mode?



We are using L3 for a virtual gateway.  We just added the static route for

each subnet on the untrusted link pointing to the gateway of the router.



Sincerely,

Sidney Eaton

Network Technician/Programmer

Ferris State University

205 West Building

Big Rapids, Mi 49307

(231) 591-5388

For Support Call (231) 591-4822 or www.ferris.edu/tac







Dave Packham <[log in to unmask]>

Sent by: Cisco Clean Access Users and Administrators

<[log in to unmask]>

10/24/2006 06:14 PM

Please respond to

Cisco Clean Access Users and Administrators

<[log in to unmask]>





To

[log in to unmask]

cc



Subject

Re: L3 Multihop mode?

















Ok  I have tried that.  I have a static route.  But if I don’t have a

managed subnet the traffic goes right thru.  No prompt for auth?







Dave P







From:Cisco Clean Access Users and Administrators

[mailto:[log in to unmask]] On Behalf Of Rajesh Nair

(rajnair)

Sent: Tuesday, October 24, 2006 4:09 PM

To: [log in to unmask]

Subject: Re: L3 Multihop mode?







Dave,







What you need in L3 is static routes, not managed subnets.  Managed

subnets are for L2.







-Rajesh.









From:Cisco Clean Access Users and Administrators

[mailto:[log in to unmask]] On Behalf Of Dave Packham

Sent: Tuesday, October 24, 2006 3:05 PM

To: [log in to unmask]

Subject: L3 Multihop mode?



We have configured our CAS into multihop L3 mode but we cannot add a

managed subnet to allow the CAS to auth the user.  Without a managed

subnet it allow traffic right thru.







Any ideas?  Anyone using the CAS in L3 multihop mode?







Dave P



U of Utah