[RADIATOR] Client MAC:xx-xx-xx-xx-xx-xx

[Heikki Vatiainen]

On 03/28/2011 02:39 PM, Christian Kratzer wrote:

>>> Which attribute does radiator use for comparison when using
>>> MAC-filtering on a client block?  Trying to pin down why one of our
>>> clients isn't being picked up by the client block we have set:
>>
>> The attribute is Calling-Station-Id. Its format is like what you have
>> below with hyphens being optional.
> 
> I just had a look at the code myself. It seems like it uses
> Called-Station-Id:

Good catch, thanks. That is true, and that is also what I was thinking.
For some reason I still managed to type Calling :)

> This is most propably the access points mac address on the air which is
> not necessarily the same as the mac adresse seen on the ethernet.

That's quite common too.

With WLANs the SSID might also be added to the end of the MAC address.

And in case of WLAN controllers the C-S-I may belong to the WLAN
controller. Some controllers also have a setting with which you can
choose to put controller or AP MAC address into Called-Station-Id.

-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.