So I thought the authorized_macs file was comparing the calling-station-id, either way I added: # cat authorized_macs a41731f505fc Reply-Message = "Device with MAC Address %{Calling-Station-Id} authorized for network access" a4-17-31-f5-05-fc Reply-Message = "Device with MAC Address %{Calling-Station-Id} authorized for network access" Looks like the same output to me: http://paste.debian.net/hidden/6f83a72e/ On 01/20/2016 03:21 PM, Alan DeKok wrote:
On Jan 20, 2016, at 3:11 PM, Munroe Sollog <mus3@lehigh.edu> wrote:
I have an aruba wireless network where I am trying to get free-radius to auth a device based on calling-station id. Line 35 confirms my re-writing is working, but line 46 looks like it is rejecting the match even though it is listed in the authorized_macs file.
The entry in the authorized_macs file doesn't match the User-Name in the packet.
Make them match, and it will work.
The string "00-01-02-03-04-05" is NOT the same as "000102030405"
Alan DeKok.
-- Munroe Sollog LTS - Network Analyst x85002