MAC-Auth + Freeradius + MySQL Database

[Russell Mike]

On Sunday, February 24, 2013, Alan DeKok wrote:

> Russell Mike wrote:
> >i also
> > came across where guys are discussing EAP and MAC authentication. i
> > could not conclude, if it is a better way of doing
> > MAC authentication using EAP.
>
>   To be clear: you don't.  EAP is authentication.  MAC "authentication"
> is just checking if the MAC address is in a known list.
>
>   Terminology matters.  Using the right terminology means that the
> solution is usually simple.  Using the wrong terminology means you're
> using the wrong design.
>
> > How to store MACs in MySQL database. Perhaps, i need to
> > create additional table to store MAC, Honestly, i am not sure how to go
> > about it. Is there any documentation that i may do NOT know of. and i
> > can follow to finish the setup.
>
>   If all you want is a "known MAC" list, then just put them into a table
> in SQL.  Then, select MAC addresses from the table at run time.  If
> they're found, continue.  If not, reject.
>
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>


Dear Alan D.

Thanks for guidelines. exactly, as you stated I simple want to store MAC
address somewhere & compair against the request. Can they be in
"radcheck"? Would you recommend that? or seperate table? Storing MAC in
radcheck, would it be correct terminology?

Secondly, i would have list of maximum 500 MACs, how about listing them in
a file. Would it be considerably slow reading from file than DB? I have no
idea because I never used radius with files.

Thanks Alan De. for your support ever
Regards --RM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130224/1176bf0d/attachment.html>