Re: clients.conf with MAC-address .

On Jul 21, 2011, at 3:54 AM, Andy Zarzycki wrote:

Greetings,

We are trying to authenticate user request coming from many APs. The plan is to authenticate the APs as well as the users centrally using freeradius. We were hoping if we could configure clients.conf with MAC-address instead of IP address for every AP. This will ensure MAC-address with shared secret to be unique and thus APs will be authenticated.

Is this possible ? Any help or direction is appreciated.

Not really. You could use dynamic clients and ARP for the packet SRC IP, but you'd have to be in the same VLAN as the AP and it'd be pretty slow/ broken. s -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter