Hi,
I need your help and I am a freeradius beginner, so please be patient with me.
In our school we have wireless internet-access for laptops via the
copspot-plugin with freeradius behind it (I guess its at least free radius v.
2.0, but I am not sure). Right now Internet-access is limited to teachers, who
have to authenticate themselfes with their individual username and individual
password. Therefore I modified the "users" file as follows:
DEFAULT
Session-Timeout = 7200,
Idle-Timeout =600,
Fall-Through = 1
DEFAULT Group == "teachers", Login-Time:="Wk0700-1730"
DEFAULT Auth-Type :=Reject
Reply-Message="Fuer SchuelerInnen ist dieser Zugang derzeit gesperrt.
No access for students so far."
We also have laptops for our students and we want to give them wireless
internet access limited to these laptops during lessons.
So therefore I want to configure freeradius so that
teachers will have wlan access with ANY mobile device after authentication with
individual username and individual password as before,
students will have wlan access after authentification with individual username
and individual password ONLY when they use one of our school laptops and will
be rejected if they try it from another mobile device (e.g. private laptop or
smartphone).
I know that the mac-address will be submitted as "calling-station-id" during
the authentification-process. So I guess I have to create a file with all
allowed mac-addresses and have to modify the users file, so that it checks a)
if username and password of this non-teacher is correct and then b) if the
request comes from one of our computers.
But I don't know if this is a possibility, I don't know if this is a good
possibility and I don't know how to do this.
So any help would be really appreciated and will help to give our students
internet access with our laptops. If you need further information please ask.
Thank you very much in advance.
best wishes
Markus
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
