allow debit group to accees only payment website
Hi, In my freeradius-3.016 configuration the debit group authorization is rejected for now. But i want to allow users in that group to access company website to make payment, How can restrict debit group users to access only company website? Thanks. ali.arslan
Seems to me that the simplest way of getting this accomplished would be to assign users from the 'debit' group IP addresses in a specific subnet that can't connect to the internet directly, but can browse via a http proxy which directs all access attempts to the payment site. Once they've paid they can reconnect and they'll get the regular network. -- Rens Houben Systemec Internet Services
Seems to me that the simplest way of getting this accomplished would be to assign users from the 'debit' group IP addresses in a specific subnet that can't connect to the internet directly, but can >browse via a http proxy which directs all access attempts to the payment site. Once they've paid they can reconnect and they'll get the regular network.
Rens Houben Systemec Internet Services
Thanks Rens. The is an ISP radius server, so users are not in local network, subnet IP addresses may no work for this situation. ali.arslan
On Oct 7, 2018, at 4:44 AM, Ali Arslan via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Hi, In my freeradius-3.016 configuration the debit group authorization is rejected for now. But i want to allow users in that group to access company website to make payment,
How can restrict debit group users to access only company website?
You need a captive portal. i.e. router / HTTP proxy. RADIUS *cannot* do this. Alan DeKok.
participants (3)
-
Alan DeKok -
Ali Arslan -
Rens Houben