Re: [Help] Is there a way to differentiate devices using Radius?

2013-03-13 Thread Danny Kurniawan
Hi All, I already found a way to configure it. Thanks a lot. http://wiki.freeradius.org/guide/Mac-Auth#Note Thanks Danny On Wed, Mar 13, 2013 at 10:14 AM, Danny Kurniawan danny.kurnia...@fairchildsemi.com wrote: Sorry for this beginner question. I have read the man_rlm password but dont

Re: [Help] Is there a way to differentiate devices using Radius?

2013-03-12 Thread A . L . M . Buxey
Hi, Is that means we have to manually added the client MAC into radius one by one? well, you want to restrict it to known devicesso ONE way is to add the allowed MACs to a DB - they could be added to some other lookup table. alan - List info/subscribe/unsubscribe? See

Re: [Help] Is there a way to differentiate devices using Radius?

2013-03-12 Thread Phil Mayers
On 03/12/2013 01:46 AM, Danny Kurniawan wrote: Is that means we have to manually added the client MAC into radius one by one? RADIUS can only act on RADIUS attributes. There's no RADIUS attribute that says: Device-Type = Bosses iPad Most NASes send username and network address of the

Re: [Help] Is there a way to differentiate devices using Radius?

2013-03-12 Thread Alan DeKok
Danny Kurniawan wrote: Is that means we have to manually added the client MAC into radius one by one? You need *some* method to separate known devices from unknown ones. How you do it is up to you. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: [Help] Is there a way to differentiate devices using Radius?

2013-03-12 Thread Danny Kurniawan
Noted. I guess using the AP to do the MAC filtering is the best options for me On Tue, Mar 12, 2013 at 9:19 PM, Alan DeKok al...@deployingradius.comwrote: Danny Kurniawan wrote: Is that means we have to manually added the client MAC into radius one by one? You need *some* method to

Re: [Help] Is there a way to differentiate devices using Radius?

2013-03-12 Thread Danny Kurniawan
Sorry for this beginner question. I have read the man_rlm password but dont see example how to add the mac address. can some of you showed to me an example of it? I assume its as simple as key in the MAC address into some file in Radius conf file or something? Thanks Danny On Wed, Mar 13, 2013

Re: [Help] Is there a way to differentiate devices using Radius?

2013-03-11 Thread Danny Kurniawan
Is that means we have to manually added the client MAC into radius one by one? -Danny On Fri, Mar 8, 2013 at 11:00 PM, Alan DeKok al...@deployingradius.comwrote: Danny Kurniawan wrote: We have successfully deploy Meraki Wireless with Radius 2.1.1 connect to eDir LDAP. Everything works just

[Help] Is there a way to differentiate devices using Radius?

2013-03-08 Thread Danny Kurniawan
Hi All, We have successfully deploy Meraki Wireless with Radius 2.1.1 connect to eDir LDAP. Everything works just fine. Now my company want to explore whether we are able to restrict a devices, that only company devices can connect to our wifi ssid. Is that possible using Radius? Like using cert

Re: [Help] Is there a way to differentiate devices using Radius?

2013-03-08 Thread Alan DeKok
Danny Kurniawan wrote: We have successfully deploy Meraki Wireless with Radius 2.1.1 connect to eDir LDAP. Everything works just fine. Now my company want to explore whether we are able to restrict a devices, that only company devices can connect to our wifi ssid. Is that possible using