Hi Ive got a micro ISP with 50 clients running on pppoe and freeradius for authenication, each client has a username and password. When a customer dials through his winbox to create pppoe connection the pppoe server on the server loads radius.so to do the authenication. What I want to do now is the following... I want to authenicate based on mac address and i do not want to use pppoe anymore..so everybody plugging in a network cable into my switch will have immediate internet access only if I have registered his mac address for him previously, otherwise everybody plugging his network cable into my swithces will have access to my internet connection. I mean I need something like the mac address filtering used in squid ...where only registered mac address are allowed through the proxy..any hints suggestions and/or tutorials are welcome. -- With Regards Ali Jawad
"Ali Jawad" <alijawad1@gmail.com> wrote:
I want to authenicate based on mac address and i do not want to use pppoe anymore..so everybody plugging in a network cable into my switch will have immediate internet access only if I have registered his mac address for him
See the switch documentation for how to do port-based authentication using MAC addresses. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Dear Alan, thanks for your suggestion however the setup is rather small at 50 users and the switch is not managable..Iam a CCNA "nothing special about that" and I wish I had the means to apply the setup on managable switch using port security however I still care about the accounting features of radius even if the managable switch was a feasible solution. On 11/2/06, Alan DeKok <aland@deployingradius.com> wrote:
"Ali Jawad" <alijawad1@gmail.com> wrote:
I want to authenicate based on mac address and i do not want to use pppoe anymore..so everybody plugging in a network cable into my switch will have immediate internet access only if I have registered his mac address for him
See the switch documentation for how to do port-based authentication using MAC addresses.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- With Regards Ali Jawad
"Ali Jawad" <alijawad1@gmail.com> wrote:
Dear Alan, thanks for your suggestion however the setup is rather small at 50 users and the switch is not managable..
Then you can't do MAC authentication. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
That would solve the problem of clients aqcuiring the IPs automatically but what about users who would enter the IPs statically. On 11/2/06, Zoltan Ori <z.ori@morehead-st.edu> wrote:
On Thursday 02 November 2006 05:43, Ali Jawad wrote:
I need something like the mac address filtering used in squid ...where only registered mac address are allowed through the proxy..any hints suggestions and/or tutorials are welcome.
Use your DHCP server for that.
Zoltan Ori
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- With Regards Ali Jawad
participants (4)
-
Alan DeKok -
Ali Jawad -
Phil Mayers -
Zoltan Ori