RE: RE: MAC based authentication

2010-08-10 Thread Chun (Andrew) Xu
To: freeradius-users@lists.freeradius.org Subject: RE: RE: MAC based authentication Phil Mayers wrote: > You've enabled 802.1x, not MAC-based VLANs. You'll need to configure 802.1x > at the servers or configure MAC-based auth at the switch. I thought I'd. Indeed authentication is workin

RE: RE: MAC based authentication

2010-08-10 Thread Chun (Andrew) Xu
Message- From: freeradius-users-bounces+cxu=unbsj...@lists.freeradius.org [mailto:freeradius-users-bounces+cxu=unbsj...@lists.freeradius.org] On Behalf Of ralfhe...@freenet.de Sent: August 10, 2010 1:11 PM To: freeradius-users@lists.freeradius.org Subject: RE: RE: MAC based authentication Phil

RE: RE: MAC based authentication

2010-08-10 Thread ralfheise
Phil Mayers wrote: > You've enabled 802.1x, not MAC-based VLANs. You'll need to configure 802.1x > at the servers or configure MAC-based auth at the switch. I thought I'd. Indeed authentication is working now, however the switch doesn't assign clients to the VLAN the RADIUS server instructs to.

Re: MAC based authentication

2010-08-10 Thread Phil Mayers
rad_recv: Access-Request packet from host 10.10.10.254 port 58798, id=45, length=118 User-Name = "aa7f9c90" NAS-Port = 119 EAP-Message = 0x021101616130303030376639633930 Message-Authenticator = 0x4ab3cccda64e92e76dfa2a97172cebca Acct-Session-Id

RE: MAC based authentication

2010-08-10 Thread ralfheise
Chun (Andrew) Xu wrote: > You will need EAP-MD5 to do authentication with Juniper EX switch as > authenticator. Enable eap in your authorize and authenticate > section. The default settings in eap.conf should work without any > tweaks. Great. That worked smoothly. Thank you! freenetMail -

Re: User-Name issue and mac based authentication

2010-07-08 Thread Fabien COMBERNOUS
Alan DeKok wrote: Fabien COMBERNOUS wrote: I'm using Free radius for Mac Address authentication. When a use tcpdump on the radius server, the Radius Request packet contains all the mac Address. But in the "radiusd -X" output, the User-Name is truncated. The last digit is erased and so the de

Re: User-Name issue and mac based authentication

2010-07-07 Thread Alan DeKok
Fabien COMBERNOUS wrote: > I'm using Free radius for Mac Address authentication. > > When a use tcpdump on the radius server, the Radius Request packet > contains all the mac Address. But in the "radiusd -X" output, the > User-Name is truncated. The last digit is erased and so the device is > reje

User-Name issue and mac based authentication

2010-07-07 Thread Fabien COMBERNOUS
Hi there, I'm using Free radius for Mac Address authentication. When a use tcpdump on the radius server, the Radius Request packet contains all the mac Address. But in the "radiusd -X" output, the User-Name is truncated. The last digit is erased and so the device is rejected. Any help is ap

Re: Mac based authentication

2009-08-10 Thread Arran Cudbard-Bell
On 10/08/2009 10:03, Sanhenra Sinaga wrote: Dear all, I'm a new network administrator in one school. I've just installed hotspot using mikrotik and freeradius as radius server. I want to make mac address (client) as username and password for authentication. In this case, i want filtering mac

Mac based authentication

2009-08-10 Thread Sanhenra Sinaga
Dear all, I'm a new network administrator in one school. I've just installed hotspot using mikrotik and freeradius as radius server. I want to make mac address (client) as username and password for authentication. In this case, i want filtering mac address (calling-station-id) as username and