Allow requests even if the MAC is not allowed?

Alan DeKok aland at deployingradius.com
Mon Oct 30 14:50:25 UTC 2023


On Oct 30, 2023, at 10:03 AM, Florian Traxler (mieX GmbH) <traxler at miex.co> wrote:
> Can you allow requests via DHCP in FreeRadius 3.0.20 even if the MAC is not allowed?

  Sure.  Just write the policy rules to do that.

  I'm not sure why you would _add_ rules saying "the MAC isn't allowed", and then decide that the MAC is still allowed.  That seems like a lot of work for little benefit.

> Example:
> () sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '00:00:00:AA:BB:CC' ORDER BY id
> () sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '00:00:00:AA:BB:CC' ORDER BY id
> () sql: WARNING: User not found in radcheck table.
> 
> Can I still assign an IP from the IP pool to this MAC?

  Yes.  Just write the rules to do that.

  Alan DeKok.



More information about the Freeradius-Users mailing list