On Wed, 2003-08-13 at 16:46, Mike Hall wrote:
> What I really need is this:
> 
> A way to make the radius server think the User-Password string (sent
> from any AP) is our 'shared secret'.  I can make it work if there is a
> way to do this.  Here the Cisco AP will send the MAC as the
> 'User-Password' but radius will change it (before processing) to be our
> 'shared secret'.  Any Suggestion?  Please...  

Why bother with checking the password anyway?

Here's what I use on my Cisco 350's:

xxxxxxxxxxxx Auth-Type == Accept, NAS-Port-Type == Wireless-802.11

Actually checking the password sent from a Cisco AP during MAC address
authentication is kind of pointless since it's such a weak password.  I
know less about how the Orinoco handles MAC address authentication but
it doesn't sound like Orinoco's scheme is much of an improvement.

Jeff



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to