RE: Mikrotik radius-mac-authentication
Does Mikrotik support CoA? If it does, this can be done (Disconnect-Request blah,blah). Ivan Kalik Kalik Informatika ISP -Original Message- From: freeradius-users-bounces+tnt=kalik@lists.freeradius.org [mailto:freeradius-users-bounces+tnt=kalik@lists.freeradius.org] On Behalf Of Adi_T Sent: 16 April 2009 13:39 To: freeradius-users@lists.freeradius.org Subject: Mikrotik radius-mac-authentication I'm using Freeradius to control the access to my Mikrotik APs. In the radius database I've put at the radcheck table all the mac-addresses of my clients. When I put accept as a value, the clients connects immediately, but when I put reject the clients that are connected do not disconnect. I have to disable radius-mac-authentication at the security profile of the wireless interface and enable it again so that the connected clients that are declared as rejected disconnect from the APs and do not reconnect again. Is there anything I can do to automatically block even the connected clients when I put reject as a value Thanks in advance Adi -- View this message in context: http://www.nabble.com/Mikrotik-radius-mac-authentication-tp23077135p23077135 .html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.0.238 / Virus Database: 270.11.57/2060 - Release Date: 04/15/09 19:52:00 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Mikrotik radius-mac-authentication
I'm using Freeradius to control the access to my Mikrotik APs. In the radius database I've put at the radcheck table all the mac-addresses of my clients. When I put accept as a value, the clients connects immediately, but when I put reject the clients that are connected do not disconnect. I have to disable radius-mac-authentication at the security profile of the wireless interface and enable it again so that the connected clients that are declared as rejected disconnect from the APs and do not reconnect again. Is there anything I can do to automatically block even the connected clients when I put reject as a value Thanks in advance Adi -- View this message in context: http://www.nabble.com/Mikrotik-radius-mac-authentication-tp23077135p23077135.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RADIUS MAC Authentication
Van Der Westhuizen, Eldridge \(Mr\) \(Summerstrand Campus North\) [EMAIL PROTECTED] wrote: Question: Is it possible to see which mac addresses/usernames got access-reject messages? Yes. It should be in radius.log. I did take my mac out of the list and couldn't connect, but didn't get any messages in the radpostauth table. That's a table for reading, not for writing. Also, i'm not getting any accounting in the accounting table. Ask the NAS why it's not sending accounting packets. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RADIUS Mac Authentication
I'm looking for a document that describes in detail the working of RADIUS MAC Authentication. (which attributes are sent in the access-request, which values should be in there etc) This because I'm going to write code to allow RADIUS MAC Authentication in our NAS. Thx in advance -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RADIUS Mac Authentication
Jonathan De Graeve [EMAIL PROTECTED] wrote: I'm looking for a document that describes in detail the working of RADIUS MAC Authentication. (which attributes are sent in the access-request, which values should be in there etc) It's not a standard, so it's not documented anywhere. This because I'm going to write code to allow RADIUS MAC Authentication in our NAS. My suggestion is to look at other NAS documentation to see how they do it, and then do the same thing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
