Cisco AV Pair

Dan Fleming flemingdp at gmail.com
Tue Jul 29 17:47:25 CEST 2014


I have noticed called-station-id also contains the SSID. Is there any way
to check this attribute in bulk so I dont have to add this check to
everyuser. If the user is connecting to the wrong ssid I would like to deny
them.

Regards,

Dan


On Tue, Jul 29, 2014 at 11:38 AM, Arran Cudbard-Bell <
a.cudbardb at freeradius.org> wrote:

>
> On 29 Jul 2014, at 10:24, Franks Andy (RLZ) IT Systems Engineer <
> Andy.Franks at sath.nhs.uk> wrote:
>
> > Isn’t cisco-avpair a multivalue attribute? To do it properly, you’d have
> to check each instance for an ssid wouldn’t you?
> > In V3, we do this with foreach, but I’m not sure in V2. Typically the
> ssid attribute sent from a cisco ap is the first one, but maybe that’s not
> always the case.
> > If I’m way off track just ignore me! J
>
> There's no support in v2.
>
> It was added for processing Cisco-AVPAIR in v3.
>
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS development team
>
> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140729/cf12eaeb/attachment.html>


More information about the Freeradius-Users mailing list