Hi, I have a problem with MAC Authentication on an Alvarion Wimax base station. I use freeradius 1.1.7 with Radius Manager 3.6. Currently I am running pppoe authentication with a Mikrotik router at the backend of the Alvarion Wimax and its working fine but I need to change to MAC authentication. I have not done MAC authentication before. Thank you in advance..
I have a problem with MAC Authentication on an Alvarion Wimax base station. I use freeradius 1.1.7 with Radius Manager 3.6. Currently I am running pppoe authentication with a Mikrotik router at the backend of the Alvarion Wimax and its working fine but I need to change to MAC authentication. I have not done MAC authentication before.
Are you going to tell us what the problem is? Or are we supposed to guess? Ivan Kalik Kalik Informatika ISP
I have never done MAC authentication and I need to know if anyone has managed to do it. Is it possible to do MAC authentication on a Alvarion Base Station with freeradius 1.1.7 and if possible how do I set it up. Thanks in advance.... -----Original Message----- From: freeradius-users-bounces+jacksonj=screamer.co.za@lists.freeradius.org [mailto:freeradius-users-bounces+jacksonj=screamer.co.za@lists.freeradius.or g] On Behalf Of Ivan Kalik Sent: 12 June 2009 11:07 AM To: FreeRadius users mailing list Subject: Re: Freeradius and Alvarion
I have a problem with MAC Authentication on an Alvarion Wimax base station. I use freeradius 1.1.7 with Radius Manager 3.6. Currently I am running pppoe authentication with a Mikrotik router at the backend of the Alvarion Wimax and its working fine but I need to change to MAC authentication. I have not done MAC authentication before.
Are you going to tell us what the problem is? Or are we supposed to guess? Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have never done MAC authentication and I need to know if anyone has managed to do it. Is it possible to do MAC authentication on a Alvarion Base Station with freeradius 1.1.7 and if possible how do I set it up.
Yes, mac auth is just a pap request where mac address is sent as username. Is it possible and how to set it up - read Alvarion manual or ask *their* technical support. Ivan Kalik Kalik Informatika ISP
Good luck doing that .. I've been working with alvarion equipment and trying to integrate with freeradius for several months now .. the alvarion support has been total sh.. uhh, poor. Let me know if you get anything working though .. I'd be interested. ________________________________________ Kristoffer Milligan, Postmaster NextNet AS Phone: +47 4000 1999 Fax: +47 3832 2110 Web: http://www.nextnet.no Adr: Lasta 50, 4400 Flekkefjord, Norway
I have never done MAC authentication and I need to know if anyone has managed to do it. Is it possible to do MAC authentication on a Alvarion Base Station with freeradius 1.1.7 and if possible how do I set it up.
Yes, mac auth is just a pap request where mac address is sent as username. Is it possible and how to set it up - read Alvarion manual or ask *their* technical support.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
________________________________________ Kristoffer Milligan, Postmaster NextNet AS Phone: +47 4000 1999 Fax: +47 3832 2110 Web: http://www.nextnet.no Adr: Lasta 50, 4400 Flekkefjord, Norway
I got the below info from some guys who support Alvarion Wimax and they say all is ready on the Alverion staff only left with changes on the radius server. I have to have the string below ready(still don't know how to come up with such a string). Yes, mac auth is just a pap request where mac address is sent as username... Do I need to change the setup for the radius server to expect a MAC address and not a username and password. Pointers from alvarion guys ......................................................................... "With regards to the VSA's (vendor specific attributes) that the base station requires is as follows: n=Service_name:v=<VLAN_list>:h=ON/OFF:a=<OFF/ON,VLAN_ID>:c=ON/OFF n=Service_name (Servive profile created on the BS) :v=<VLAN_list> (list of VLANS allowed on this link blank if untagged) :h=ON/OFF (Hybrid mode on or off) :a=<OFF/ON,VLAN_ID> ( Access VLAN on or off and if on the VLAN ID :c=ON/OFF ( VLAN Classification Mode on or off) The string needs to be sent as one continuous string as in the example above." ............................................................................ ................. -----Original Message----- From: freeradius-users-bounces+jacksonj=screamer.co.za@lists.freeradius.org [mailto:freeradius-users-bounces+jacksonj=screamer.co.za@lists.freeradius.or g] On Behalf Of Ivan Kalik Sent: 12 June 2009 11:40 AM To: FreeRadius users mailing list Subject: RE: Freeradius and Alvarion
I have never done MAC authentication and I need to know if anyone has managed to do it. Is it possible to do MAC authentication on a Alvarion Base Station with freeradius 1.1.7 and if possible how do I set it up.
Yes, mac auth is just a pap request where mac address is sent as username. Is it possible and how to set it up - read Alvarion manual or ask *their* technical support. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I got the below info from some guys who support Alvarion Wimax and they say all is ready on the Alverion staff only left with changes on the radius server. I have to have the string below ready(still don't know how to come up with such a string).
There is nothing to change on the radius server. Pap works by default.
Pointers from alvarion guys .........................................................................
"With regards to the VSA's (vendor specific attributes) that the base station requires is as follows:
n=Service_name:v=<VLAN_list>:h=ON/OFF:a=<OFF/ON,VLAN_ID>:c=ON/OFF
n=Service_name (Servive profile created on the BS) :v=<VLAN_list> (list of VLANS allowed on this link blank if untagged) :h=ON/OFF (Hybrid mode on or off) :a=<OFF/ON,VLAN_ID> ( Access VLAN on or off and if on the VLAN ID :c=ON/OFF ( VLAN Classification Mode on or off)
The string needs to be sent as one continuous string as in the example above."
You need to make an entry like this in users file: mac-add-ress Cleartext-Password := "mac-add-ress" That-Alvarion-VSA = "that_string" *You* will have to come up with the string. We can't make it up for you. There is nothing misterious in their instructions - you should know answer to all of these (do you want features on or off, what VLAN is/are to be used, if any, ...). Ivan Kalik Kalik Informatika ISP
I do not have any Vlans, I am working with only one subnet for all my connections... ............................................................................ .................................
I got the below info from some guys who support Alvarion Wimax and they say all is ready on the Alverion staff only left with changes on the radius server. I have to have the string below ready(still don't know how to come up with such a string).
There is nothing to change on the radius server. Pap works by default.
Pointers from alvarion guys .........................................................................
"With regards to the VSA's (vendor specific attributes) that the base station requires is as follows:
n=Service_name:v=<VLAN_list>:h=ON/OFF:a=<OFF/ON,VLAN_ID>:c=ON/OFF
n=Service_name (Servive profile created on the BS) :v=<VLAN_list> (list of VLANS allowed on this link blank if untagged) :h=ON/OFF (Hybrid mode on or off) :a=<OFF/ON,VLAN_ID> ( Access VLAN on or off and if on the VLAN ID :c=ON/OFF ( VLAN Classification Mode on or off)
The string needs to be sent as one continuous string as in the example above."
You need to make an entry like this in users file: mac-add-ress Cleartext-Password := "mac-add-ress" That-Alvarion-VSA = "that_string" *You* will have to come up with the string. We can't make it up for you. There is nothing misterious in their instructions - you should know answer to all of these (do you want features on or off, what VLAN is/are to be used, if any, ...). Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
It looks like you're using the non-802.16e release. If you are using 802.16e someone sent you the wrong information. The service configuration is different under Eth CS and IP CS. Which are you using? Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Jairos Jackson Sent: Friday, June 12, 2009 6:27 AM To: 'FreeRadius users mailing list' Subject: RE: Freeradius and Alvarion
I do not have any Vlans, I am working with only one subnet for all my connections...
........................................................................ .... .................................
I got the below info from some guys who support Alvarion Wimax and they say all is ready on the Alverion staff only left with changes on the radius server. I have to have the string below ready(still don't know how to come up with such a string).
There is nothing to change on the radius server. Pap works by default.
Pointers from alvarion guys
........................................................................ .
"With regards to the VSA's (vendor specific attributes) that the base station requires is as follows:
n=Service_name:v=<VLAN_list>:h=ON/OFF:a=<OFF/ON,VLAN_ID>:c=ON/OFF
n=Service_name (Servive profile created on the BS) :v=<VLAN_list> (list of VLANS allowed on this link blank if untagged) :h=ON/OFF (Hybrid mode on or off) :a=<OFF/ON,VLAN_ID> ( Access VLAN on or off and if on the VLAN ID :c=ON/OFF ( VLAN Classification Mode on or
off)
The string needs to be sent as one continuous string as in the example above."
You need to make an entry like this in users file:
mac-add-ress Cleartext-Password := "mac-add-ress" That-Alvarion-VSA = "that_string"
*You* will have to come up with the string. We can't make it up for you. There is nothing misterious in their instructions - you should know answer to all of these (do you want features on or off, what VLAN is/are to be used, if any, ...).
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Ben Wiechman -
Ivan Kalik -
Jairos Jackson -
Kristoffer Milligan