Proxy based on MAC

Michael Griego mgriego at utdallas.edu
Sat Feb 3 00:38:48 CET 2007


You don't *really* need to match the whole string.  The following  
would work just as well and be much more readable:

Calling-Station-Id =~ "^(00-0D-93-|00-03-93-|00-05-02-)"

And as to where it goes, anywhere a check expression goes:  users  
file, SQL radcheck table, etc.  As long as the server is compiled  
with regular expressions and they're left enabled (which in the  
default configs, they are), you should be golden.

--Mike

On Feb 2, 2007, at 5:11 PM, King, Michael wrote:

> I'd like to proxy user's off to a different RADIUS server based on
> they're MAC address.
>
> Currently, my NAS reports MAC address as  Calling-Station-Id =
> "00-0D-93-EA-89-06"
>
> I'd like any user that has a MAC starting with 00-0D-93 (and about 8
> more MAC's) to be proxied off to another Radius server.
>
> I've come up with a RegEX that matches Mac addresses.  (Least I think
> it's close)
>
> Correct me, cause I know I'm gonna get this wrong.  (First real try  
> with
> Regex) (I'm using 3 separart MAC's here)
>
> DEFAULT Calling-Station-Id =~
> "(00-0D-93-([0-9a-fA-F][0-9a-fA-F]-){1}([0-9a-fA-F][0-9a-fA-F]))| 
> (00-03-
> 93-([0-9a-fA-F][0-9a-fA-F]-){1}([0-9a-fA-F][0-9a-fA-F]))|(00-05-02- 
> ([0-9
> a-fA-F][0-9a-fA-F]-){1}([0-9a-fA-F][0-9a-fA-F]))"
>
>
> But where does this go, and what else do I have to configure?
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ 
> users.html




More information about the Freeradius-Users mailing list