Re: MAC Address Auth

2013-04-09 Thread Mulindwa
Pool_Name = pool_128,     Framed-Address = 255.255.255.254,     Framed-Netmask = 255.255.255.255,     Fall-Through = 0   Eric M From: Alan DeKok To: Mulindwa ; FreeRadius users mailing list Sent: Monday, April 8, 2013 5:21 PM Subject: Re: MAC Address A

Re: MAC Address Auth

2013-04-08 Thread Mulindwa
Great, thanx Alan   Eric M From: Alan DeKok To: Mulindwa ; FreeRadius users mailing list Sent: Monday, April 8, 2013 5:21 PM Subject: Re: MAC Address Auth Mulindwa wrote: > I have read and read, and i have not seen where thr reply list or check > l

Re: MAC Address Auth

2013-04-08 Thread Alan DeKok
Mulindwa wrote: > I have read and read, and i have not seen where thr reply list or check > list is $ man unlang Read doc/rlm_sql I have no idea which files you're reading. But it's clear you're *not* reading the documentation that comes with the server. Don't google for random pages on

Re: MAC Address Auth

2013-04-08 Thread Mulindwa
I have read and read, and i have not seen where thr reply list or check list is   Eric M From: Marinko Tarlać To: freeradius-users@lists.freeradius.org Sent: Monday, April 8, 2013 5:02 PM Subject: Re: MAC Address Auth Do you plan to read anything or you

Re: MAC Address Auth

2013-04-08 Thread Marinko Tarlać
ric M *From:* Matthew Newton *To:* Mulindwa ; FreeRadius users mailing list *Sent:* Monday, April 8, 2013 4:16 PM *Subject:* Re: MAC Address Auth On Mon, Apr 08, 2013 at 04:18:54AM -0700, Mulindwa wrote: > I want user eric@ut3 with this Mac Addres

Re: MAC Address Auth

2013-04-08 Thread Mulindwa
Thanks Matthew, Sorry to askm but where is the reply list and where is the check list?   Eric M From: Matthew Newton To: Mulindwa ; FreeRadius users mailing list Sent: Monday, April 8, 2013 4:16 PM Subject: Re: MAC Address Auth On Mon, Apr 08, 2013 at

Re: MAC Address Auth

2013-04-08 Thread Matthew Newton
On Mon, Apr 08, 2013 at 04:18:54AM -0700, Mulindwa wrote: > I want user eric@ut3 with this Mac Address to log in, and if > the MAC address is different he will not be granted access. Move the Mac-Addr attribute from the reply list to the check list, and make it a check operator (==) not assignment

Re: MAC Address Auth

2013-04-08 Thread George Chelidze
freeradius.org *Sent:* Thursday, April 4, 2013 5:41 PM *Subject:* Re: MAC Address Auth Hello, add the correct check item to your user database. In the case below (User-Name = user2000@ut3) you should have the check item Attr-2352-145 == "5c-7d-5e-3f-d0-f7" for this speicifc user i

Re: MAC Address Auth

2013-04-08 Thread Marinko Tarlać
FreeRadius users mailing list *Sent:* Friday, April 5, 2013 9:07 AM *Subject:* Re: MAC Address Auth Thanks Mattias, I get an error saying; Unknown attribute "Attr-2352-145" This is how i have it setup user20001@ut3 Password = "006060", Simultaneous-Use = 1 Attr-2352-145 =

Re: MAC Address Auth

2013-04-08 Thread Mulindwa
ubject: Re: MAC Address Auth Thanks Mattias, I get an error saying; Unknown attribute "Attr-2352-145" This is how i have it setup user20001@ut3  Password = "006060", Simultaneous-Use = 1     Attr-2352-145 = "5c-7d-5e-3f-d0-f7",     Service-Type =

Re: MAC Address Auth

2013-04-05 Thread Matthias Nagel
; Qos_Policy_Metering = broadband_128_metering, > Framed-Protocol = PPP, > Ip_Address_Pool_Name = pool_128, > Framed-Address = 255.255.255.254, > Framed-Netmask = 255.255.255.255, > Fall-Through = 0 > > > > Eric M >

Re: MAC Address Auth

2013-04-04 Thread Mulindwa
__ From: Matthias Nagel To: freeradius-users@lists.freeradius.org Sent: Thursday, April 4, 2013 5:41 PM Subject: Re: MAC Address Auth Hello, add the correct check item to your user database. In the case below (User-Name = user2000@ut3) you should have the check item Attr-2352-145 =

Re: MAC Address Auth

2013-04-04 Thread Matthias Nagel
MAC Address > Attr-2352-98 = "3" > Attr-2352-112 = "6.2.1.9" > Acct-Session-Id = "020268008FC9-515D8419" > > > Eric M > > > > From: Mulindwa > To: Alan DeKok ; FreeRadius users mailing list >

Re: MAC Address Auth

2013-04-04 Thread Mulindwa
lindwa To: Alan DeKok ; FreeRadius users mailing list Sent: Thursday, April 4, 2013 4:58 PM Subject: Re: MAC Address Auth Thanks Alan, Let me do so.   Eric M From: Alan DeKok To: Mulindwa ; FreeRadius users mailing list Sent: Thursday, April 4,

Re: MAC Address Auth

2013-04-04 Thread Mulindwa
Thanks Alan, Let me do so.   Eric M From: Alan DeKok To: Mulindwa ; FreeRadius users mailing list Sent: Thursday, April 4, 2013 4:47 PM Subject: Re: MAC Address Auth Mulindwa wrote: > Hi All, > > Have been trying to authenticate my ADSL users

Re: MAC Address Auth

2013-04-04 Thread Alan DeKok
Mulindwa wrote: > Hi All, > > Have been trying to authenticate my ADSL users using Mac Address Auth, > however i have failed even after going through the documentation. > > I want to authenticate with the highlighted, anyone done this and can help? It's been d

Re: MAC Address Auth

2013-04-04 Thread Mulindwa
Hi All, Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation. I want to authenticate with the highlighted, anyone done this and can help? Thanx This is how the accounting file looks; User-Name = "user200

Freeradius username, password + MAC address auth

2010-08-23 Thread ziko
Hello. I am running freeradius 2.1.7 server on my Centos. I am using mysql database. everything works ok! I am using username password method for auth, but now i want to add mac address auth method too. I want Radius server checks username, password and MAC addresses at the same time when

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Arran Cudbard-Bell
Arran Cudbard-Bell wrote: Alan DeKok wrote: Brian Ertel wrote: DEFAULTUser-Name =~ "([0-9a-fA-F]:)5[0-9a-fA-F]", Auth-Type := Accept ... vlan stuff So for username are you saying I can use any old text string? *([0-9a-fA-F]:){5}[0-9a-fA-F] unless you want to match 0:50 ;

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Arran Cudbard-Bell
Alan DeKok wrote: Brian Ertel wrote: DEFAULT User-Name =~ "([0-9a-fA-F]:)5[0-9a-fA-F]", Auth-Type := Accept ... vlan stuff So for username are you saying I can use any old text string? *([0-9a-fA-F]:){5}[0-9a-fA-F] unless you want to match 0:50 ;) What leads you to c

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Alan DeKok
Brian Ertel wrote: > Unknown attribute "Cleartext-Password" Use 1.1.7. It contains MAY bug fixes, security fixes, and features over previous versions. If you're not going to use 1.1.7, just use User-Password instead of Cleartext-Password. But you SHOULD use ":=" for the operator, rather tha

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Phil Mayers
On Mon, 2007-08-27 at 09:42 -0400, Brian Ertel wrote: > Alan, > > I now have the users file syntax like this: > > 00:0e:35:1c:e0:52 Cleartext-Password := "testing" > > Tunnel-Medium-Type = "IEEE-802", > Tunnel-Type = "VLAN", > Tunnel-Private-Group-Id = "157", R

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Brian Ertel
". radiusd.conf[1773] Failed to parse authorize section. Brian. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, August 27, 2007 9:12 AM To: FreeRadius users mailing list Subject: Re: Freeradius, Cisco WLC, Mac address auth. Bria

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Brian Ertel
Ok. I will do that. Thanks, Brian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, August 27, 2007 9:12 AM To: FreeRadius users mailing list Subject: Re: Freeradius, Cisco WLC, Mac address auth. Brian Ertel wrote: > DEFA

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Alan DeKok
Brian Ertel wrote: > DEFAULT User-Name =~ "([0-9a-fA-F]:)5[0-9a-fA-F]", Auth-Type := Accept > ... vlan stuff > > So for username are you saying I can use any old text string? What leads you to conclude that? Have read the documentation for the "users" file? Do you know what a reg

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Brian Ertel
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, August 27, 2007 8:34 AM To: FreeRadius users mailing list Subject: Re: Freeradius, Cisco WLC, Mac address auth. Brian Ertel wrote: > a correction of what I am using or syntax to accomplish the > unknown/known user i

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Alan DeKok
Brian Ertel wrote: > a correction of what I am using or syntax to accomplish the > unknown/known user issue? It's a correction of the entry for a known user. See the README and "man rlm_pap" in 1.1.7. > In other words which syntax takes care of the unknown users and which > takes care of the k

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Brian Ertel
7, 2007 1:38 AM To: FreeRadius users mailing list Subject: Re: Freeradius, Cisco WLC, Mac address auth. Brian Ertel wrote: > I have freeradius working with a Cisco 2000 series controller. A > wireless client attempts to associate with a WAP the controller sends an > auth request to freeradi

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-26 Thread Alan DeKok
Brian Ertel wrote: > I have freeradius working with a Cisco 2000 series controller. A > wireless client attempts to associate with a WAP the controller sends an > auth request to freeradius who sees the mac address of the user: > > 00:0e:35:1c:e0:52 Auth-Type := Local, User-Password == "testing"

Freeradius, Cisco WLC, Mac address auth.

2007-08-24 Thread Brian Ertel
Hi all, I have freeradius working with a Cisco 2000 series controller. A wireless client attempts to associate with a WAP the controller sends an auth request to freeradius who sees the mac address of the user: 00:0e:35:1c:e0:52 Auth-Type := Local, User-Password == "testing" Tun

Question about mac address auth / dot1x / vlan assignement.

2005-10-21 Thread Didier CONTIS
I apologize if the subject is a little bit off topic. I have what seems now to be a classic scenario where I am trying to do mac address auth / vlan assignment using Windows XP / Cisco Catalyst switch running IOS / FreeRadius 1.0.5 After reading several posts on the mailing list about the

Re: mac address auth question

2005-10-21 Thread kdr akm
ompression = Van-Jacobson-TCP-IP DEFAULT Hint == "SLIP"    Framed-Protocol = SLIP     cut--     and i.am starting to use mysql and i success but not with mac addre

Re: mac address auth question

2005-10-19 Thread N White
kdr akm wrote: Hi, i'm using freeradius 1.0.5. i make a pppoe server with rp-pppoe and freeradius without mysql and i make auth by username and password all i need to add to my configuration a check if mac address and if valid accept ( a mac address authentication but without mysql ) so how c

mac address auth question

2005-10-19 Thread kdr akm
Hi, i'm using freeradius 1.0.5.i make a pppoe server with rp-pppoe and freeradius without mysql and i make auth by username and password all i need to add to my configuration a check if mac address and if valid accept ( a mac address authentication but without mysql ) so how can i make this think

local mac-address auth and peap proxying

2005-06-23 Thread B. Tolka
Hello All, I have mac address auth such as the example below in my users file 00097c78dd2d Auth-Type := Local, User-Password == 00097c78dd2d Tunnel-Type:1=13, Tunnel-Medium-Type:1=6, Tunnel-Private-Group-Id:1=23 I would like to add the ability to proxy peap request to another radius

Re: Problem authenticate MAC address : AUTH-TYPE = EAP

2004-08-24 Thread Alan DeKok
"Nurul Faizal Bin M.Shukeri" <[EMAIL PROTECTED]> wrote: > rlm_eap_peap: Had sent TLV failure, rejecting. Read the REST of the debugging output to see what went wrong. If you're only going to read the last 10 lines of debugging output, there's no point in reading any of it. Alan DeKok. -

Problem authenticate MAC address : AUTH-TYPE = EAP

2004-08-24 Thread Nurul Faizal Bin M.Shukeri
I’m using, win2k(USING PEAP(EAP-MSCHAPV2) client and freeradius-1.0.0 running with slackware 10. I try to authenticate and authorize combining username and Calling-Station-ID. I test it work on Auth-Type := Local but not in Auth-Type :=EAP .   (work) test Auth-Type := Local, User-Passwor