Deny user based on MAC-address

Kenneth Grady klg at lanl.gov
Mon Oct 2 19:34:25 CEST 2006


you can also use lines like:

#at&t
DEFAULT User-Name =~ "80-00-10([-:]([ 0-9a-fA-F][0-9a-fA-F])){3}",
Auth-Type := Reject

#ibm
DEFAULT User-Name =~ "10-00([-:]([ 0-9a-fA-F][0-9a-fA-F])){4}",
Auth-Type := Accept

#misc
DEFAULT User-Name =~ "^02-|^04-[eE0][aA0]|^[aA][aA]-", Auth-Type := Reject

DEFAULT User-Name =~ "(0[0-9a-fA-F])([-:]?([
0-9a-fA-F][0-9a-fA-F])){5}", Auth-Type := Accept

Torkel Mathisen wrote:
>
> Hi,
>
>  
>
> How can I deny a user from freeradius based on the MAC-address on the PC?
>
>  
>
> I use users file only.
>
>  
>
> Do I need MAC Authentication for that ?
>
>  
>
>  
>
> Regards,
>
> Torkel
>
> ------------------------------------------------------------------------
>
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list