Capture the MAC address of VPN connecting devices in FreeRadius
Hi All; Is it possible to capture in Freeradius the MAC address of a device connecting via a VPN server (Cisco VPN 3000 or Microsoft PPTP Server), pls? The user has a Username/Password Combination which isn't the MAC Address. Thank you. Lucio _________________________________________________________________ See the most popular videos on the web http://clk.atdmt.com/GBL/go/115454061/direct/01/
Lucio Godoy wrote:
Is it possible to capture in Freeradius the MAC address of a device connecting via a VPN server (Cisco VPN 3000 or Microsoft PPTP Server), pls?
Look in the Access-Request. If you see something that looks like a MAC address, that's it. It may be in the Calling-Station-Id attribute. Alan DeKok.
Hi Alan; In the Calling-Station-Id i get the device IP Address and not the MAC! Thanks Lucio> Date: Mon, 24 Nov 2008 16:52:22 +0100> From: aland@deployingradius.com> To: freeradius-users@lists.freeradius.org> Subject: Re: Capture the MAC address of VPN connecting devices in FreeRadius> > Lucio Godoy wrote:> > Is it possible to capture in Freeradius the MAC address of a device> > connecting via a VPN server (Cisco VPN 3000 or Microsoft PPTP Server), pls?> > Look in the Access-Request. If you see something that looks like a> MAC address, that's it.> > It may be in the Calling-Station-Id attribute.> > Alan DeKok.> -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _________________________________________________________________ See the most popular videos on the web http://clk.atdmt.com/GBL/go/115454061/direct/01/
Hi,
Hi Alan;
In the Calling-Station-Id i get the device IP Address and not the MAC!
luckily you dont get a phone number instead ;-) (RFC 2865) I'm wondering if theres a set in stone standard for Calling-Station-ID ie should it be a MAC or IP address? or am I being very hopeful? alan
In the Calling-Station-Id i get the device IP Address and not the MAC!
luckily you dont get a phone number instead ;-) (RFC 2865)
I'm wondering if theres a set in stone standard for Calling-Station-ID ie should it be a MAC or IP address? or am I being very hopeful?
Don't know about it being set as a standard, but with 802.1x you tend to get MAC address, for connection via network IP address and for dial up - phone number. Ivan Kalik Kalik Informatika ISP
A.L.M.Buxey@lboro.ac.uk wrote:
I'm wondering if theres a set in stone standard for Calling-Station-ID ie should it be a MAC or IP address? or am I being very hopeful?
You're being hopeful. The contents of the Calling-Station-Id are whatever the NAS wants them to be. This is RADIUS after all, and people just laugh when you ask them to follow the standards... Alan DeKok.
On Mon, Nov 24, 2008 at 9:46 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
I'm wondering if theres a set in stone standard for Calling-Station-ID ie should it be a MAC or IP address? or am I being very hopeful?
For IEEE 802.1X, see RFC 3580, Ch. 3.21 (MAC address). This is also included as an informative annex in IEEE Std 802.1X-2004 (D.3.21). - Jouni
Lucio Godoy wrote:
In the Calling-Station-Id i get the device IP Address and not the MAC!
<sigh> Read the rest of my message: If you see something that looks like a MAC, that's it. If you don't see a MAC in the request... then that means there's no MAC in the request. This isn't hard to figure out. And there's no "magic" way for FreeRADIUS to somehow create the correct MAC. Alan DeKok.
In the Calling-Station-Id i get the device IP Address and not the MAC!
How you want to retrieve a MAC if VPN client can be theoretically behind one or more routers and, at all, it can use non-Ethernet link to accessto the VPN server? If you want to get MAC - use PPPoE for clients, or make MAC fixation by scripts, or use something like ipguard...
participants (6)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Jouni Malinen -
Lucio Godoy -
NiTr0 -
tnt＠kalik.net