What I want to do is prevent mobile devices like 
blackberries,iphone/ipad etc from even being able to connect to the 
wireless access point. I don't want them sitting in the registration or 
the guest vlans.  I can move them to the isolation vlan, but I would 
just prefer that they just aren't allowed to connect.  Since the public 
ssid uses mac authentication is there a way to tie that to the an 
enabled violation to send a reject instead of an accept.  And of course 
there will be a few exceptions.  I'm guessing I can use the whitelist 
category in the violation to allow those devices, if I can tie radius 
authentication to violations.  I see there is a custom.pm for radius in 
lib/pf/radius but its pretty much empty.  There isn't any sample to 
build from.

Is that even possible?

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to