On Sunday, February 24, 2013, Alan DeKok wrote:
Russell Mike wrote:
>i also
> came across where guys are discussing EAP and MAC authentication. i
> could not conclude, if it is a better way of doing
> MAC authentication using EAP.
To be clear: you don't. EAP is authentication. MAC "authentication"
is just checking if the MAC address is in a known list.
Terminology matters. Using the right terminology means that the
solution is usually simple. Using the wrong terminology means you're
using the wrong design.
> How to store MACs in MySQL database. Perhaps, i need to
> create additional table to store MAC, Honestly, i am not sure how to go
> about it. Is there any documentation that i may do NOT know of. and i
> can follow to finish the setup.
If all you want is a "known MAC" list, then just put them into a table
in SQL. Then, select MAC addresses from the table at run time. If
they're found, continue. If not, reject.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dear Alan D.
Thanks for guidelines. exactly, as you stated I simple want to store MAC address somewhere & compair against the request. Can they be in "radcheck"? Would you recommend that? or seperate table? Storing MAC in radcheck, would it be correct terminology?
Secondly, i would have list of maximum 500 MACs, how about listing them in a file. Would it be considerably slow reading from file than DB? I have no idea because I never used radius with files.
Thanks Alan De. for your support ever
Regards --RM