Reject user by Calling-Station-Id

tnt at tnt at
Fri Jan 30 23:45:35 CET 2009

>Hi i just tried to add following (as adviced) into my radcheck table in
>UserName: DEFAULT
>Attribute: Calling-Station-Id
>op: ==
>Value: 00:0b:6a:xx:xx:xx, Auth-Type := Reject
>And it did not work
> guessI just can not add value with operator in it, but still how can i
>reject user based on their mac address with MySQL only setup. I would assume
>if i do the same in users tabe on the server then it should work? But I
>prefere MySQL managment

OK, use groups then. For group ban put:

Calling-Station-Id == 00:0b:6a:xx:xx:xx and Auth-Type := Reject in
radgroupcheck table

you can also add Reply-Message = Oh, no, you won't! in radgroupreply (I
see you are asking about reply message for rejected users as well)

add all users to group ban with low priority.

Ivan Kalik
Kalik Informatika ISP

More information about the Freeradius-Users mailing list