On 8/26/07, Arran Cudbard-Bell <A.Cudbard-Bell@sussex.ac.uk> wrote:
liran tal wrote:
Others may correct me but I believe that this is not the role of the RADIUS server. To actually do this kind of "filtering" you need to use other technologies such as proxies or captive portal (see chillispot). Yep for the most part your correct. However, some specific NAS vendors like HP, have included Access Control List features setable using VSAs (Vendor specific attributes). But these are usually only available on the prohibitively expensive switches.
Firewall, proxy server,or captive portal is the way to go with this one... Though if you want proper 802.1x authentication , then it's firewall/proxy server only.
Regards, Liran.
For an example of how to do this with Apache, you can see this page. You may not want two-factor authentication, but the idea is the same. Note that there have been problems reported using a version of Apache later than 2.2.2. http://www.wikidsystems.com/documentation/howtos/how-to-add-two-factor-authe... HTH, Nick
On 8/26/07, *zamshed* <zamshed.email@gmail.com <mailto:zamshed.email@gmail.com>> wrote:
dear Friends. I am a very new user of RADIUS. how can I configure this RADIUS for a particular USER,such as when that USER login with RADIUS,then that user only get PERMIT to access a fixed WEBSITE only,the rest others will b BLOCKED for that particular USER. Can I do that with this RADIUS server?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication