IPv6 accounting RADIUS SQL schema?

[WAGHORN, Jason (NHS BORDERS)]

>>  My $0.02 is that this sounds like a good use-case for a smart DHCP server.  :)
>>
>> i.e. have FreeRADIUS handle DHCP, too.  On initial request, it can check the MAC address in
>>radacct for the username who last logged in.  Then, check their billing history.  If their
>>account is in arrears, give them an IP from a walled garden.

How will this work (either way) if the client supports MAC spoofing? Surely you should prevent access via username, not client MAC (they could also just use another client, or W-NIC,...)

Seems to me like a game of whack-a-mole :)


********************************************************************************************************************

This message may contain confidential information. If you are not the intended recipient please inform the
sender that you have received the message in error before deleting it.
Please do not disclose, copy or distribute information in this e-mail or take any action in relation to its contents. To do so is strictly prohibited and may be unlawful. Thank you for your co-operation.

NHSmail is the secure email and directory service available for all NHS staff in England and Scotland. NHSmail is approved for exchanging patient data and other sensitive information with NHSmail and other accredited email services.

For more information and to find out how you can switch, https://portal.nhs.net/help/joiningnhsmail