Check out: http://wiki.freeswitch.org/wiki/ACL#Users

It'll automatically add users with a cidr= attribute to the ACL list. This way you can set channel variables in the users and use them through your dialplan, all authenticated by ip address.

Cheers,

Mathieu Rene
Avant-Garde Solutions Inc
Office: + 1 (514) 664-1044 x100
Cell: +1 (514) 664-1044 x200
mr...@avgs.ca




On 20-Dec-09, at 3:19 PM, Ahmed Naji wrote:

People,

Please do excuse me if this is a FAQ.

I've so far not worked out a way to implement IP authentication effectively. I have a number of gateways/end points/...etc. hitting the switch without registration and originating calls to a number of upstreams I have configured.

So far, everything is smooth and FREESwitch is legendary in every way. Over 10,000 simultaneous sessions at 120cps, on a dual-Xeon machine running CentOS and CPU usage is barely a blip.

My problem is authentication. I need a method to authenticate end points based only on their IP addresses. I am currently filtering access through the firewalls, but I would really like to delegate this task to FS in prep for an SBC setup I'm working on. If I remove the firewall filters, then anyone is able to get in.

I could't workout precisely how ACLs work in FS from the WiKi and the documentation, and I haven't been able to make sense of how Digest functions either.

Can anyone shed some light on those two areas ? I would like to really get to the bottom of this and update the WiKi pages with the working setup once done.

Regards,

Ahmed.



--
Ahmed A. Ibrahim-Naji Al-Alousi
Ph.D., MIEE, MBCS
_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

Reply via email to