<HTML xmlns:eXclaimer="http://www.exclaimer.co.uk" xmlns:o="urn:schemas-microsoft-com:office:office">
<HEAD>
<META http-equiv="Content-Type" content="text/html; charset=UTF-16">
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-16">
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.5700.6" name=GENERATOR></HEAD><BODY ><DIV>
<DIV><FONT face=Arial size=2><SPAN class=906164108-02112006>Hi
All</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=906164108-02112006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=906164108-02112006>Need some advice
please. Using Mikrotik as a NAS. Wireless clients connect to
Mikrotik and i've got RADIUS MAC authentication setup on the Mikrotik. So
all the clients MAC addresses are sent to the FreeRadius box in format
00:00:00:00:00:00 (which is the username) and blank password. So in the
freeradius mysql db, i've got the following:</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=906164108-02112006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=906164108-02112006>In the radcheck
table, i've got the mac as the username and blank password. In usergroup,
i link the mac username to a group called Wireless. In Radgroupcheck i've
got an entry for the Wireless group and telling it Auth-Type := Local. In
Radgroupreply i only pass a service-type attribute for the wireless group with
framed-user as value.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=906164108-02112006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=906164108-02112006>Authentication seems
to happen okay. In the radpostauth, i get an entry for the username, chap
password authentication and access-accept message. The wireless client
connect and get a DCHP ip from a pool in the Mikrotik NAS.
</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=906164108-02112006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=906164108-02112006>Question: Is it
possible to see which mac addresses/usernames got access-reject messages?
I did take my mac out of the list and couldn't connect, but didn't get any
messages in the radpostauth table. </SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=906164108-02112006>Also, i'm not
getting any accounting in the accounting table. Do you only get accounting
from making a PPP connection? Or is it possible to do RADIUS MAC
authentication and get accounting detail from the session?
</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=906164108-02112006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=906164108-02112006>Any help would be
appreciated.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=906164108-02112006>Eldridge
</SPAN></FONT></DIV></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>
<FONT COLOR="firebrick">NOTICE: Please note that this eMail, and the contents thereof, <BR>is subject to the standard NMMU eMail disclaimer which may be found at: <BR></FONT><<A HREF="http://www.nmmu.ac.za/disclaimer/email.htm">http://www.nmmu.ac.za/disclaimer/email.htm</A>>> <BR></DIV>
<DIV> </DIV>
<DIV> </DIV></BODY></HTML>