accepting user with username and password depending from mac-address

Markus Müller mmuell25 at gmx.de
Fri Sep 9 23:04:24 CEST 2011


Hi,
I need your help and I am a freeradius beginner, so please be patient with me.
In our school we have wireless internet-access for laptops via the copspot-plugin with freeradius behind it (I guess its at least free radius v. 2.0, but I am not sure). Right now Internet-access is limited to teachers, who have to authenticate themselfes with their individual username and individual password. Therefore I modified the "users" file as follows:

DEFAULT
	Session-Timeout = 7200,
	Idle-Timeout =600,
	Fall-Through = 1
DEFAULT		Group == "teachers", Login-Time:="Wk0700-1730"
DEFAULT		Auth-Type :=Reject
	Reply-Message="Fuer SchuelerInnen ist dieser Zugang derzeit gesperrt. No access for students so far." 


We also have laptops for our students and we want to give them wireless internet access limited to these laptops during lessons.
So therefore I want to configure freeradius so that
teachers will have wlan access with ANY mobile device after authentication with individual username and individual password as before,
students will have wlan access after authentification with individual username and individual password ONLY when they use one of our school laptops and will be rejected if they try it from another mobile device (e.g. private laptop or smartphone). 

I know that the mac-address will be submitted as "calling-station-id" during the authentification-process. So I guess I have to create a file with all allowed mac-addresses and have to modify the users file, so that it checks a) if username and password of this non-teacher is correct and then b) if the request comes from one of our computers.
But I don't know if this is a possibility, I don't know if this is a good possibility and I don't know how to do this.

So any help would be really appreciated and will help to give our students internet access with our laptops. If you need further information please ask.

Thank you very much in advance.

best wishes

Markus





More information about the Freeradius-Users mailing list