Mac authentication

Caines, Max Max.Caines at wlv.ac.uk
Thu Feb 28 16:09:28 CET 2019


Hi Luc

MAC authentication using RADIUS has no way to set the VLAN. The attributes are only sent during EAP authentication

Regards

Max

-----Original Message-----
From: Freeradius-Users <freeradius-users-bounces+max.caines=wlv.ac.uk at lists.freeradius.org> On Behalf Of Luc Paulin
Sent: 28 February 2019 14:51
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Subject: Mac authentication

Hi eveyrone,

I am looking at the mac authentication (
https://url6.mailanyone.net/v1/?m=1gzN2K-0001px-4B&i=57e1b682&c=7MV7zgTu9JIISHg0eGKlyxHeUBQjj-P7mniYFhNoFk9uUTpX4fcwBGXgCYg8u-Mf2d016YLORqfD45-Jj7Skfcfy920_MIGziU7-L1Fa8xVGht3NFRIm48VQJAV_ffuvI5CIppebnxM-fixZBWYY7Qyljqh_y0Hqrd24s0YH5QM8GW5vo1IbErsOgP1ipmkH2ApEhc3V31P4vhbpX7hS0Sa5pdMnC__cw3yutEKlpLZzKfvzGCVnudg8Mli5Zny8)
Base on that article look that the main behavior is to authorise or not
system base on their mac address in addition the EAP.  Currently my setup
is working well an can dynamically assign user/system vlan base on their
authentification.  However there's some equipement that won't be able to
use EAP/PEAP authenticate over 802.1x, (smart tv for example).

Most likely there's somehing I miss, but would that be something possible
to assign vlan  199 to mac address ABCDEF  and vlan 201 to mac address
UVWXYZ

  -Luc


--
                         !!!!!
                       ( o o )
 --------------oOO----(_)----OOo--------------
   Luc Paulin
   email: paulinster(at)gmail.com
   Skype: paulinster
-
List info/subscribe/unsubscribe? See https://url6.mailanyone.net/v1/?m=1gzN2K-0001px-4B&i=57e1b682&c=hfnxPRhKjyUwDaXCHqVhTuQZZjaGwYi_QDVj-3vMPBRpTRpZ6iPid-lUx9ZUKUWqserYrjYf9qzCBJUcsMv3lfNK2qckPS05oY5-8xoFPcg9LHr9Zb4zYIBReWwPdnAE8XidzacOiU6e6s7JhX77kXic-eO22dBOYZ5Oq8CfdIXg8Jw9IgIU7rUB2HWNTJXFwkbszLh38vdd0M1YDYK4VSiiQ2ETkClDIzFxzZGLvd1ESbsULfznKFCJA7zEMFcv
------------------------------------
This email has been scanned for spam & viruses. If you believe this email should have been stopped by our filters, click the following link to report it (https://portal.mailanyone.net/index.html#/outer/reportspam?token=dXNlcj1tYXguY2FpbmVzQHdsdi5hYy51azt0cz0xNTUxMzY1NTA4O3V1aWQ9NUM3N0Y1ODRGNjUxMzkzQTdDQjU1QTQ4OTU0MEU4RTk7dG9rZW49NGU2ZTk4ZGM5YjIxMzA5MTIzNzkyZjFjYTBkMTA1ZWQ0NTU4NzIwZjs%3D).



More information about the Freeradius-Users mailing list