On Jan 20, 2016, at 3:39 PM, Munroe Sollog <mus3@lehigh.edu> wrote:
So I thought the authorized_macs file was comparing the calling-station-id,
Did you configure then "files" module to do that? It looks like you didn't. And it helps to read the debug output: } # policy rewrite_calling_station_id = noop (0) if (!ok) { (0) if (!ok) -> TRUE You've put this into the "default" virtual server: rewrite_calling_station_id if (!ok) { reject } Why? That's rejecting the request when it can't re-write the Calling-Station-ID. And that's followed by: else { update control { Auth-Type := Accept } } Which accepts *all* requests if the Calling-Station-ID was re-written. And *nothing* in the "default" server says to use the "authorized_macs" file. You want the server to do check authorized_macs, but you never told it to use the authorized_macs file./ Go fix that. And read the debug output you're posting. It really is informative. Alan DeKok.