Hi, How can I deny a user from freeradius based on the MAC-address on the PC? I use users file only. Do I need MAC Authentication for that ? Regards, Torkel
You can use in the users file some like that DEFAULT Fall-Through = Yes # =========== 00:13:96:00:D3:7F ========== 00139600D37F Auth-Type := Local, [Some_Input_Attribute] [Some_Output_Attribute_1], [Some_Output_Attribute_2] DEFAULT Auth-Type := Reject Germán P. Santillán Administrador de Redes Jefe del Dpto. Técnico DESETech Argentina S.A. San Martín 133 - CP: B8000FIC Bahía Blanca - Argentina Tel/Fax: +54 (291) 456-5642 gsantillan@desetech.com.ar http://www.desetech.com.ar _____ From: freeradius-users-bounces+gsantillan=desetech.com.ar@lists.freeradius.org [mailto:freeradius-users-bounces+gsantillan=desetech.com.ar@lists.freeradius .org] On Behalf Of Torkel Mathisen Sent: Friday, September 29, 2006 4:53 AM To: FreeRadius users mailing list Subject: Deny user based on MAC-address Hi, How can I deny a user from freeradius based on the MAC-address on the PC? I use users file only. Do I need MAC Authentication for that ? Regards, Torkel
you can also use lines like: #at&t DEFAULT User-Name =~ "80-00-10([-:]([ 0-9a-fA-F][0-9a-fA-F])){3}", Auth-Type := Reject #ibm DEFAULT User-Name =~ "10-00([-:]([ 0-9a-fA-F][0-9a-fA-F])){4}", Auth-Type := Accept #misc DEFAULT User-Name =~ "^02-|^04-[eE0][aA0]|^[aA][aA]-", Auth-Type := Reject DEFAULT User-Name =~ "(0[0-9a-fA-F])([-:]?([ 0-9a-fA-F][0-9a-fA-F])){5}", Auth-Type := Accept Torkel Mathisen wrote:
Hi,
How can I deny a user from freeradius based on the MAC-address on the PC?
I use users file only.
Do I need MAC Authentication for that ?
Regards,
Torkel
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
DESEtech - German P. Santillan -
Kenneth Grady -
Torkel Mathisen