Hello, Does anyone know that how to configure the wifi chillispot users by each NAS? For example : There are "testuser" wifi chillispot user and three Wifi zones which are AP1, AP2 and AP3. That AP{1-2} are nas-identifier. AP1 has 10.10.10.1, AP2 has 10.10.10.2 and AP3 has 10.10.10.3 ip address. That "testuser" must be available for AP1 and AP2 wifi zones. But, that user must be unavailable for AP3 wifi zone. How will do it?
Dagia Dorjsuren wrote:
For example : There are "testuser" wifi chillispot user and three Wifi zones which are AP1, AP2 and AP3. That AP{1-2} are nas-identifier.
AP1 has 10.10.10.1, AP2 has 10.10.10.2 and AP3 has 10.10.10.3 ip address.
That "testuser" must be available for AP1 and AP2 wifi zones. But, that user must be unavailable for AP3 wifi zone.
How will do it?
Put the users into groups. Then, do group checking. Group A is allowed to access AP1 and AP2. etc. See the FAQ for examples of group definition and use. See also "man rlm_passwd", which has examples of group definitions. Alan DeKok.
ok. Would you mind sending to me an example of group difinition by NAS? I use freeradius with mysql. Thanks ________________________________ From: Alan DeKok <aland@deployingradius.com> To: Dagia Dorjsuren <dagmid_d@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Monday, August 20, 2012 6:52 PM Subject: Re: Users on the multiple APs Dagia Dorjsuren wrote:
For example : There are "testuser" wifi chillispot user and three Wifi zones which are AP1, AP2 and AP3. That AP{1-2} are nas-identifier.
AP1 has 10.10.10.1, AP2 has 10.10.10.2 and AP3 has 10.10.10.3 ip address.
That "testuser" must be available for AP1 and AP2 wifi zones. But, that user must be unavailable for AP3 wifi zone.
How will do it?
Put the users into groups. Then, do group checking. Group A is allowed to access AP1 and AP2. etc. See the FAQ for examples of group definition and use. See also "man rlm_passwd", which has examples of group definitions. Alan DeKok.
Dagia Dorjsuren wrote:
ok. Would you mind sending to me an example of group difinition by NAS?
Yes, I would mind. I already told you where to look. Did you understand my message? Or are you just too lazy to read the documentation?
I use freeradius with mysql.
Documentation exists for that, too. Go read it. Alan DeKok.
I configured it using huntgroup with mysql in authorize section as below. update request { Huntgroup-Name := "%{sql:select groupname from radhuntgroup where nasipaddress=\"%{NAS-IP-Address}\"}" } but I have a question about reply message. How to configure that if the user's huntgroup is "zone1" and that user login through "zon2", the reply message will have to be "You are not in zone2"? Thanks, ________________________________ From: Alan DeKok <aland@deployingradius.com> To: Dagia Dorjsuren <dagmid_d@yahoo.com> Cc: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Wednesday, August 22, 2012 5:35 PM Subject: Re: Users on the multiple APs Dagia Dorjsuren wrote:
ok. Would you mind sending to me an example of group difinition by NAS?
Yes, I would mind. I already told you where to look. Did you understand my message? Or are you just too lazy to read the documentation?
I use freeradius with mysql.
Documentation exists for that, too. Go read it. Alan DeKok.
On Tue, Aug 28, 2012 at 1:54 PM, Dagia Dorjsuren <dagmid_d@yahoo.com> wrote:
but I have a question about reply message. How to configure that if the user's huntgroup is "zone1" and that user login through "zon2", the reply message will have to be "You are not in zone2"?
Short answer: don't bother. Most likely your end user won't be able to see the reply message anyway. Long answer: to update the reply message: update reply { Reply-Message := "Put whatever message you want here" } AFAIK there's no easy way to create the exact message you want. Most likely you need to write your own code in authorization section, possibly using rlm_perl. -- Fajar
participants (3)
-
Alan DeKok -
Dagia Dorjsuren -
Fajar A. Nugraha