wpa2 enterprise separate users

Alan DeKok aland at deployingradius.com
Mon Jan 26 15:24:26 CET 2015

On Jan 26, 2015, at 9:01 AM, howtocisco <howtocisco at howtocisco.pl> wrote:
> Simultaneous-Use indeed would block user from connecting via Router1 and Router2 at the same time, but nothing stops him to use Router1 OR Router2.
> Imagine situation, where user "A" supposed to connect to Router1's SSID, but instead, he chooses SSID from Router2, and still he will be authorized by freeradius. How can i block this kind of access. I want the user to connect only via Router1, and take away the possibility for him to connect via Router2.

  Put the users into groups.  Then, check the group membership against the router they’re using.

  See rlm_passwd for simple Unix-style groups.

  Alan DeKok.

More information about the Freeradius-Users mailing list