"filter-id" attribute could be the key try using a radgroupreply with attribute: filted-id , value : aclfreesurf and name groupfree your users that match this rule obviously must to be into groupfree radusergroup the above if you have FR+sql then if your hotspot is a mikrotik for example , you have to make a filter rule with hotspot chain, action: jump, jump target :groupfree at the end the groupfree rule will be your ac regards pablou 2015-07-22 11:37 GMT-03:00 Andrés Gómez <andres.gomez.ruiz@gmail.com>:
Thanks a lot Fernando!
My NAS can use D-VLAN, but only with MAC or 802.1x authentication, not with Web authenticacion.
I think Squid is the answer, but I cant understand how does It work with freeradius,
Regards
2015-07-22 8:38 GMT-05:00 Fernando Pizarro <feanpg@gmail.com>:
El 22/07/15 a las 15:04, Andrés Gómez escribió:
Hi everybody!!
I'm using a captive portal + freeradius + mysql to do AAA of users in a private network. All work great. I can set timeout, up/down speed, etc., by groups/profiles (using tables groupradcheck, grouradreply, etc in my
mysql
DB). But Now I need to do an extra control. I need to implement a content control based on the freeradius's user profiles.
I mean. User of group1 can surf only on some list of websites. User of group2 can surf only on .edu domines. User of group3 have free surf.
I know it's not a task of freeradius to do content filter, but I have seen than can do some integration with another free servers like Squid.
I appreciate if you can give me your advices.
Regards,
Sorry, I can try explain better.
If you freeradius act like router between your private network and Internet. Create diferent VLANs on the machine and add in your profiles Dynamic VLAN attributes for the groups.
On Squid, create diferent ACLs for the radius profile with your filters.
Sorry for my language.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- *C. Andrés Gómez R.* - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html