[Help] Is there a way to differentiate devices using Radius?

Phil Mayers p.mayers at imperial.ac.uk
Tue Mar 12 11:09:20 CET 2013


On 03/12/2013 01:46 AM, Danny Kurniawan wrote:
> Is that means we have to manually added the client MAC into radius one
> by one?

RADIUS can only act on RADIUS attributes. There's no RADIUS attribute 
that says:

  Device-Type = "Bosses iPad"

Most NASes send username and network address of the client (MAC or IP) 
and that's about it for optional (non-authentication) stuff.

In other words, RADIUS can't differentiate devices - *you* have to do 
that, by supplying data and policy.


More information about the Freeradius-Users mailing list