Thanks a lot! That worked.
-Vineet
Phil Mayers wrote:
Vineet Verma wrote:
Hi,
I have been able to configure FreeRadius to successfully
authenticate a client based on the MAC address with entries like:
00-0c-41-5f-91-4b Auth-Type := Local, User-Password ==
"00-0c-41-5f-91-4b"
Acct-Interim-Interval = 60
Is there any way to configure it so I don't have to list every
client? For example can I have some kind of glob as follows, say for
all clients with OUI 00-0c-41:
00-0c-41-* Auth-Type := Local, User-Password == "00-0c-41-5f-91-4b"
Acct-Interim-Interval = 60
If not, how do I do something like this?
Try:
DEFAULT User-Name =~ "00-0c-41-..-..-..", Auth-Type := Accept
Acct-Interim-Interval = 60
If this is a multi-NAS server (e.g. dialup+802.1x+macauth) you'll want
to put more checks on the first line e.g. NAS-Port-Type == Ethernet,
Huntgroup-Name == "mac-auth-switches" to avoid the minor security hole
of a user on the other NASes being able to set their username to a MAC
address.
Thanks,
Vineet
- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
