Proxy based on MAC
Michael Griego
mgriego at utdallas.edu
Sat Feb 3 00:38:48 CET 2007
You don't *really* need to match the whole string. The following
would work just as well and be much more readable:
Calling-Station-Id =~ "^(00-0D-93-|00-03-93-|00-05-02-)"
And as to where it goes, anywhere a check expression goes: users
file, SQL radcheck table, etc. As long as the server is compiled
with regular expressions and they're left enabled (which in the
default configs, they are), you should be golden.
--Mike
On Feb 2, 2007, at 5:11 PM, King, Michael wrote:
> I'd like to proxy user's off to a different RADIUS server based on
> they're MAC address.
>
> Currently, my NAS reports MAC address as Calling-Station-Id =
> "00-0D-93-EA-89-06"
>
> I'd like any user that has a MAC starting with 00-0D-93 (and about 8
> more MAC's) to be proxied off to another Radius server.
>
> I've come up with a RegEX that matches Mac addresses. (Least I think
> it's close)
>
> Correct me, cause I know I'm gonna get this wrong. (First real try
> with
> Regex) (I'm using 3 separart MAC's here)
>
> DEFAULT Calling-Station-Id =~
> "(00-0D-93-([0-9a-fA-F][0-9a-fA-F]-){1}([0-9a-fA-F][0-9a-fA-F]))|
> (00-03-
> 93-([0-9a-fA-F][0-9a-fA-F]-){1}([0-9a-fA-F][0-9a-fA-F]))|(00-05-02-
> ([0-9
> a-fA-F][0-9a-fA-F]-){1}([0-9a-fA-F][0-9a-fA-F]))"
>
>
> But where does this go, and what else do I have to configure?
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/
> users.html
More information about the Freeradius-Users
mailing list