I think like:
DEFAULT Calling-Station-Id == "00-0D-60-5D-2D-AC", Auth-Type := Accept
Filter-ID="profile=DEFAULT"
On Wed, 2004-06-23 at 08:26, Mike Patchen wrote:
> Taking this a step further, is it possible to authenticate based soley
> on MAC address? Meaning completely ignoring what is being sent for
> username/password.
>
> >>> [EMAIL PROTECTED] 6/22/2004 9:38:14 AM >>>
> yes. It depends on what the switch sends in the
> authentication-request.
> if your auth-detail has username and password with the MAC address you
> just have a User-Name and User-Password for the machine in your db. It
> only authorizes the machine to be on the network. It's a little better
> than just plugging in any machine. If the MAC address is in the
> Calling-Station-ID, and a real User-Name and User-Password is in the
> request you could authorize the person to use that machine.
>
> If you have a profile in your switch of "Accept" and a default of
> reject.
>
> users file
> ...
> 00-01-02-ab-cd-de User-Password == "00-01-02-ab-cd-de"
> Filter-ID="profile=Accept"
>
> DEFAULT User-Password =~"..-..-..-"
> Filter-ID="profile=DEFAULT"
>
> On Tue, 2004-06-22 at 00:58, Christoffer Dahl Petersen wrote:
> > Hi!
> >
> > I was wondering if it is possible to tell the Freeradius to use the
> > MAC addr. as a validating key?
> > I would like to store all my clients MAC addr. in a db, and use it
> as
> > a backend for Freeradius, then when the clients starts, the AP sends
> > the clients MAC addr. to Freeradius and the MAC addr. is used as a
> > token for validating.
> >
> > / Christoffer
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
