Hello everybody! I need to do kind of “universal transparent radius” without any external database for authentification both computers and Cisco-phones in voice vlan. I think there must be something in “users” file kind of: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ DEFAULT attr:= “it’s a some computer” Auth-Type := Accept DEFAULT attr:= “it’s a some Cisco-phone” Auth-Type := Accept Cisco-AVPair = "device-traffic-class=voice" ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ How do you think, is there some possibility to do this? Thank you. Alex Bilik С уважением, Александр Билик Инженер по информационной безопасности Группа управления коммуникациями Группа ЛСР E-mail: Bilik.AA@lsrgroup.ru<mailto:Bilik.AA@lsrgroup.ru> www.lsrgroup.ru [cid:image002.png@01D00029.668E3800]
Bilik.AA@lsrgroup.ru wrote:
I need to do kind of “universal transparent radius” without any external database for authentification both computers and Cisco-phones in voice vlan.
That should be simple
I think there must be something in “users” file kind of:
For complex checks, you shouldn't use the users file. Just write the policies in the "authorize" section.
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
DEFAULT attr:= “it’s a some computer” Auth-Type := Accept
How do you tell "it's a computer" ? Hint: read the debug output. Alan DeKok.
participants (2)
-
Alan DeKok -
Bilik.AA＠lsrgroup.ru