MAC Address Auth

[Matthias Nagel]

Hello,
add the correct check item to your user database. In the case below (User-Name = user2000 at ut3) you should have the check item
Attr-2352-145 == "5c-7d-5e-3f-d0-f7"
for this speicifc user in your user database. Then you repeat this for every user/mac-address pair you want.
Best regards, Matthias

Am Donnerstag 04 April 2013, 07:25:55 schrieb Mulindwa:
> Great, i have run the debug and i did get the attribute required.
> If i want to full fill the two conditions i.e username/passwd and Mac Address = Attr-2352-145
> 
> How would i need to twick my radiusd.conf file to achieve this?
> 
> 
> 
> 
> User-Name = "user2000 at ut3"
>    CHAP-Password = "cccddd'"
>     CHAP-Challenge = "mmmm"
>     Service-Type = Framed-User
>     Framed-Protocol = PPP
>     NAS-Identifier = "UT-BRAS-EDGE"
>     NAS-IP-Address = x.x.x.x
>     NAS-Port = 855649483
>     NAS_Real_Port = 855638816
>     NAS-Port-Type = Virtual
>     Attr-87 = "3/3 vlan-id 800 pppoe 11467"
>     Medium_Type = 11
>     Attr-2352-145 = "5c-7d-5e-3f-d0-f7" ==== MAC Address
>     Attr-2352-98 = "3"
>     Attr-2352-112 = "6.2.1.9"
>     Acct-Session-Id = "0202FFFF68008FC9-515D8419"
> 
>  
> Eric M
> 
> 
> ________________________________
>  From: Mulindwa <meric_l at yahoo.com>
> To: Alan DeKok <aland at deployingradius.com>; FreeRadius users mailing list <freeradius-users at lists.freeradius.org> 
> Sent: Thursday, April 4, 2013 4:58 PM
> Subject: Re: MAC Address Auth
>  
> 
> Thanks Alan,
> 
> Let me do so.
> 
>  
> Eric M
> 
> 
> ________________________________
>  From: Alan DeKok <aland at deployingradius.com>
> To: Mulindwa <meric_l at yahoo.com>; FreeRadius users mailing list <freeradius-users at lists.freeradius.org> 
> Sent: Thursday, April 4, 2013 4:47 PM
> Subject: Re: MAC Address Auth
>  
> Mulindwa wrote:
> > Hi All,
> > 
> > Have been trying to authenticate my ADSL users using Mac Address Auth,
> > however i have failed even after going through the documentation.
> > 
> > I want to authenticate with the highlighted, anyone done this and can help?
> 
>   It's been done.
> 
> > This is how the accounting file looks;
> 
>   If you're trying to debug authentication, it helps to look at
> *authentication* traffic, and not *accounting* data.
> 
>   And run the server in debugging mode as suggested in the FAQ, "man"
> page, web pages, and daily on this list.
> 
>   Honestly, there is NO excuse for refusing to do this.
> 
>   Alan DeKok.
> 
> 
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
----------------------------------------------------------------------
Matthias Nagel
Willy-Andreas-Allee 1, Zimmer 506
76131 Karlsruhe

Telefon: +49-721-8695-1506
Mobil: +49-151-15998774
e-Mail: matthias.h.nagel at gmail.com
ICQ: 499797758
Skype: nagmat84