Block access by Tunnel client IP?

Hi all, I'm using freeradius 2.1.3.Would like to know if it's possible to block access (maybe in users file) by checking following criteria ? Acct-Tunnel-Client-Endpoint:0 = 137.*.*.* Would anyone please help? Thanks. Regards, /ST Wong (st-w...@cuhk.edu.hk) - List

realm in User-Name stripped in accounting data?

Hi all, We setup proxy (on freeradius 2.1.3) by putting following lines in users and acct_users: DEFAULT Huntgroup-Name == Aruba, Aruba-Essid-Name == Univ WiFi, Realm != localream.mydomain, Proxy-to-realm := remoteRealm Authentication works properly while User-Name in accounting data,

RE: realm in User-Name stripped in accounting data?

We setup proxy (on freeradius 2.1.3) by putting following lines in users and acct_users: DEFAULT Huntgroup-Name == Aruba, Aruba-Essid-Name == Univ WiFi, Realm != localream.mydomain, Proxy-to-realm := remoteRealm Authentication works properly while User-Name in accounting data,

RE: Pls help: realm based proxy setting

Hi all, I'm using freeradius 2.1.3 and setting up a realm-based proxy server. In users file, I add line like following: DEFAULT Aruba-Essid-Name == NewSSID, Realm == realm1.my.domain, Proxy-to-realm := test1.my.domain, aruba-user-vlan := 191 Fall-Through = 1

Pls help: realm based proxy setting

Hi all, I'm using freeradius 2.1.3 and setting up a realm-based proxy server. In users file, I add line like following: DEFAULT Aruba-Essid-Name == NewSSID, Realm == realm1.my.domain, Proxy-to-realm := test1.my.domain, aruba-user-vlan := 191 Fall-Through = 1 And test

Pls help: virtual server specific EAP-TTLS/PEAP inner tunnel setting

Hi all, We got 2 problems when setting up a virtual server (testing.mydomain) to handle requests for realm @testing.mydomain: 1. we defined a new ldap server in modules/ldap and want to use it for authorization/authentication of realm @testing.mydomain, but have no idea how to use it since the

Simultaneous-Use for roaming wireless user

Hi all, We enabled Simultaneous-Use checking with checking against accouting data stored in MySQL database. However, found that some of the Stop records are not received and this makes Simultaneous-Use checking fail. Seems roaming users will always encountered this problem. I wonder if I've to

accounting only client?

Hi all, Can I setup clients.conf so that some clients are allowed to send accounting packet only ? I'm using 2.1.3. Thanks a lot. /ST Wong - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Pls help: missing Stop accounting packets

Hi all, I'm using FreeRadius 2.1.3 on 2 Linux machines with accounting data stored in both radacct file and MySQL database. Recently we found that some 'aged' records have AcctStopTime = NULL.Seems Stop accounting packet for these records are not received. The problem is consistent in

proxy authorization based on NAS IP?

Hi all, We're using freeradius 2.1.1 and are looking for proxy authorization like following: 1. NAS1 (192.168.10.1) : accepts realmA and realmB, and proxy to remote radius serverA 2. NAS2 (192.168.10.2) : accepts realmB and realmC, and proxy to remote radius serverB 3. NAS3 (192.168.10.3) :

SSID based checking for Simultaneous-Use?

Hi all, I'm using free radius 2.1.1. I got request from boss to enable simultaneous login checking for particular SSID. I've no idea since seems same groups of users may use different SSID's. Would anyone advise if Is it possible to do that? Thank you very much. Regards, /ST Wong - List

redundant + load balancing not working?

Hi all, I'm using freeradius 2.1.1 on CentOS 5.2. I've 2 ldap servers for authentication. It works when I specify: redundant { ldap1 ldap2 } As expected, requests go to ldap2 when ldap1 is down.

pls help: restrict authentication for certain realms from particular clients

Hi all, We just upgraded our freeradius server from 1.7 to 2.1.1. I'd like to restrict authentication requests as following: client A accepts: @realm1, @realm2 client B accepts: @realm2, @realm3 so that requests like follwoing will be rejected: @realm3 to client A @realm1 to client B Would

RE: Can’t compile version 2.1.0 !

Hi, Have to link with -lncurses, see http://bugs.freeradius.org/show_bug.cgi?id=589 https://webmail.itsc.cuhk.edu.hk/exchweb/bin/redir.asp?URL=http://bugs.freeradius.org/show_bug.cgi?id=589 . Hope this helps. From: [EMAIL PROTECTED] 代理 Jose Franco Jr Sent:

RE: EAP testing without AP?

testing without AP? ST Wong (ITSC) wrote: I'm new to EAP and want to setup freeradius with EAP-TTLS support. After some struggling with 802.1x doc and terms, the radiusd is up. However, as my testing AP is not ready now, I've no way to test my setup. I wonder if it's possible to test

RE: EAP testing without AP?

To: FreeRadius users mailing list Subject: Re: EAP testing without AP? ST Wong (ITSC) wrote: Thanks for all advice. Result of testing using eapol_test is okay, except error OpenSSL: tls_connection_handshake - Failed to read possible Application Data error::lib(0):func(0):reason(0) is found

EAP testing without AP?

Hi all, I'm new to EAP and want to setup freeradius with EAP-TTLS support. After some struggling with 802.1x doc and terms, the radiusd is up. However, as my testing AP is not ready now, I've no way to test my setup. I wonder if it's possible to test the authentication