MAC Authentication - Bad Idea?

Jim Rice jmrice6640 at yahoo.com
Wed Feb 2 20:15:13 CET 2011


Thanks, Alan.

The MikroTik routers can be configured to send a variety of MAC address formats, the default is XX:XX:XX:XX:XX:XX

It can also be set to include the same MAC address in the Password field, instead of NULL, but I do not see any added benefit to that.

>> but had to set Auth-Type := Accept.
> 
>   Hmm... that's probably not the best way to do it,
> but if it works...

Is there a best (or better) way?

Do I need to be concerned with MAC spoofing?

Thanks again,

Jim




More information about the Freeradius-Users mailing list