I have noticed called-station-id also contains the SSID. Is there any way to check this attribute in bulk so I dont have to add this check to everyuser. If the user is connecting to the wrong ssid I would like to deny them.

Regards,

Dan

On Tue, Jul 29, 2014 at 11:38 AM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:

On 29 Jul 2014, at 10:24, Franks Andy (RLZ) IT Systems Engineer <Andy.Franks@sath.nhs.uk> wrote:

> Isn’t cisco-avpair a multivalue attribute? To do it properly, you’d have to check each instance for an ssid wouldn’t you?
> In V3, we do this with foreach, but I’m not sure in V2. Typically the ssid attribute sent from a cisco ap is the first one, but maybe that’s not always the case.
> If I’m way off track just ignore me! J

There's no support in v2.

It was added for processing Cisco-AVPAIR in v3.

Arran Cudbard-Bell <a.cudbardb@freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html