Hi all, I have to implement my first freeradius, and after a search in the faq and the net, an interrogation still remain. I need to authenticate machines, to grant them normal access to the lan, and if they are not known , put them on a special VLAN. I was think to do that with MAC address, but i know they can be easily spoofed. I m reading the book of FreeRadius (Oreilly), and there is a doubt for the usage of Radius in this case of figure. Could someone give me keyword or suggestions that can help me in my search? At least, may i persist in the way of using radius in this case? Thanks
At least, may i persist in the way of using radius in this case?
Yes. Using mac authentication is not that bad. As long as it is not the *only* way to control access to your network. If you can't get the hardware to control access you should use captive portal. Ivan Kalik Kalik Informatika ISP
Yes. Using mac authentication is not that bad. As long as it is not the *only* way to control access to your network.
It isn't so bad as primary authentication also in home networks networks with small segments (10-15 PCs, max - 30 PCs) - and when users knows each other well. But it's much safer to use combine authentication (MAC+login).
Thanks to all! I will do probably do it. The network have more than 100 computer, and i have seen that the ldap can be used by Freeradius. That way, the second method of authentification come by itself. Thanks again, i will try to do it, and hope that success with maximum help from the books I read. Cordialy 2008/12/1, NiTr0 <nitr0@seti.kr.ua>:
Yes. Using mac authentication is not that bad. As long as it is not the *only* way to control access to your network.
It isn't so bad as primary authentication also in home networks networks with small segments (10-15 PCs, max - 30 PCs) - and when users knows each other well.
But it's much safer to use combine authentication (MAC+login).
participants (3)
-
NiTr0 -
Sebastien Serre -
tnt＠kalik.net