yes. It depends on what the switch sends in the authentication-request.
if your auth-detail has username and password with the MAC address you
just have a User-Name and User-Password for the machine in your db. It
only authorizes the machine to be on the network. It's a little better
than just plugging in any machine. If the MAC address is in the
Calling-Station-ID, and a real User-Name and User-Password is in the
request you could authorize the person to use that machine.
If you have a profile in your switch of "Accept" and a default of
reject.
users file
...
00-01-02-ab-cd-de User-Password == "00-01-02-ab-cd-de"
Filter-ID="profile=Accept"
DEFAULT User-Password =~"..-..-..-"
Filter-ID="profile=DEFAULT"
On Tue, 2004-06-22 at 00:58, Christoffer Dahl Petersen wrote:
> Hi!
>
> I was wondering if it is possible to tell the Freeradius to use the
> MAC addr. as a validating key?
> I would like to store all my clients MAC addr. in a db, and use it as
> a backend for Freeradius, then when the clients starts, the AP sends
> the clients MAC addr. to Freeradius and the MAC addr. is used as a
> token for validating.
>
> / Christoffer
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
