I'm new at this and I was wondering if anyone can help me out configuring free radius for mac address authentication I need to install a server for mac address authentication, without certificates. I have switch clients and I need authenticate users on these switches for mac (only). It's about 10 000 users on 200 switches in network. The problem is that same switches returns for user: User-Name = "002179a516be" and another switches the same user in reverse!!! format: User-Name = "eb-61-5a-79-12-00" Should I configure different Users for that? Thanks
А Гауэрт wrote:
I'm new at this and I was wondering if anyone can help me out configuring free radius for mac address authentication
I need to install a server for mac address authentication, without certificates.
I have switch clients and I need authenticate users on these switches for mac (only). It's about 10 000 users on 200 switches in network.
The problem is that same switches returns for user: User-Name = "002179a516be" and another switches the same user in reverse!!! format: User-Name = "eb-61-5a-79-12-00"
Should I configure different Users for that?
No. Configure a rule to re-write the first format into the second format. You can use regular expressions for this. See "man unlang". Alan DeKok.
А Гауэрт wrote:
I'm new at this and I was wondering if anyone can help me out configuring free radius for mac address authentication
I need to install a server for mac address authentication, without certificates.
I have switch clients and I need authenticate users on these switches for mac (only). It's about 10 000 users on 200 switches in network.
The problem is that same switches returns for user: User-Name = "002179a516be" and another switches the same user in reverse!!! format: User-Name = "eb-61-5a-79-12-00" Use rlm_attr_rewrite or rlm_perl for that.
-- With best regards, Evgeniy Kozhuhovskiy Leader, Services team Minsk State Phone Network, RUE Beltelecom.
participants (3)
-
Alan DeKok -
Evgeniy Kozhuhovskiy -
А Гауэрт