Authenticating AP.

[Mrinal K]

Hello Everyone,

I was trying to configure freeradius to authenticate users coming from
multiple APs and authenticate them on the basis of the AP the request is
coming from(e.g. if user A's request is sent by AP X then accept; if user
A's request comes from AP Y then reject; if user B's request comes from AP Y
then accept).

One scheme for this to be achieved could be that client.conf has entry for
each AP individually and APs IP address and shared secret is used to
identify the AP; however the scenario I am considering has APs behind the
NATed gateways rendering this method useless. But if I  configure
clients.conf over MAC-address instead of IP-address and use
Called-Station-ID with shared secret to identify AP then I think it should
work out.

I am not sure how feasible will this be. I went through the old posts in the
forum but could not find anything specific, to point in this direction. I
would be extremely thankful if anyone could direct me in right direction.

Thanks in advance.

Regards,

Kumar Mrinal



-- 
-
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110529/76a31a31/attachment.html>