wpa2 enterprise separate users

[Alan DeKok]

On Jan 26, 2015, at 9:01 AM, howtocisco <howtocisco at howtocisco.pl> wrote:
> Simultaneous-Use indeed would block user from connecting via Router1 and Router2 at the same time, but nothing stops him to use Router1 OR Router2.
> Imagine situation, where user "A" supposed to connect to Router1's SSID, but instead, he chooses SSID from Router2, and still he will be authorized by freeradius. How can i block this kind of access. I want the user to connect only via Router1, and take away the possibility for him to connect via Router2.

  Put the users into groups.  Then, check the group membership against the router they’re using.

  See rlm_passwd for simple Unix-style groups.

  Alan DeKok.