<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On 23 Jun 2008, at 21:01, Ivan Kalik wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>Run server in debug mode. Is SSID appearing in some attribute in<br>Access-Request?<br><br></div></blockquote><div><br></div><div>It's usually in the Called-Station-Id attribute:</div><div><br></div><div><radio-mac>:<ssid></div><div><br></div><div><span class="Apple-style-span" style="color: rgb(36, 72, 87); font-family: Verdana; line-height: 18px; white-space: nowrap; -webkit-border-horizontal-spacing: 2px; -webkit-border-vertical-spacing: 2px; "><pre><code style="white-space: pre-wrap; "># Rewrite calling station id and called station id attributes
</code><code style="white-space: pre-wrap; "># into a standard format.
</code><code style="white-space: pre-wrap; "># If a 6th seperator is present write the trailing chars into Called-Station-SSID
</code><code style="white-space: pre-wrap; ">if("%{Called-Station-Id}" =~ /^([0-9a-f]{2})[-:]?([0-9a-f]{2})[-:]?([0-9a-f]{2})[-:]?([0-9a-f]{2,})[-:]?([0-9a-f]{2})[-:]?([0-9a-f]{2})[-:]?([-a-z0-9_.]*)?/i){
</code><code style="white-space: pre-wrap; "> update request {
</code><code style="white-space: pre-wrap; "> Called-Station-Id := "%{1}%{2}%{3}%{4}%{5}%{6}"
</code><code style="white-space: pre-wrap; "> Called-Station-SSID := "%{7}"
</code><code style="white-space: pre-wrap; "> }
</code><code style="white-space: pre-wrap; ">}</code></pre></span></div>That generally works in FR 2.0* , though you have to define Called-Station-SSID as a local attribute, see etc/raddb/dictionary for examples.</div><div><br></div><div><br><blockquote type="cite"><div>Ivan Kalik<br>Kalik Informatika ISP<br><br><br>Dana 23/6/2008, "Roy Kartadinata" <<a href="mailto:rkartadinata@pocket.com">rkartadinata@pocket.com</a>> piše:<br><br><blockquote type="cite">Hi guys,<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">We're trying to centralize our corporate wifi authentication using<br></blockquote><blockquote type="cite">freeradius. So far, I was able to get user to authenticate based on NAS<br></blockquote><blockquote type="cite">IP (I got access to multiple NAS working as well) and Mac Address. Is it<br></blockquote><blockquote type="cite">possible to also limit their access per SSID? The reason for this is<br></blockquote><blockquote type="cite">because one of our locations, our HQ, has 3 SSID and only certain people<br></blockquote><blockquote type="cite">have access to certain SSID but I'm not sure if this will conflict with<br></blockquote><blockquote type="cite">already working NAS checking. Our HQ is using Cisco Wireless LAN<br></blockquote><blockquote type="cite">Controller so all 3 SSID will connect to radius using the same NAS IP.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Cheers,<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Roy Kartadinata<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></blockquote></div><br></body></html>