[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: Bypass Canceled Subscribers
From:       Alan DeKok <aland () deployingradius ! com>
Date:       2018-06-26 22:27:29
Message-ID: CE2A195D-9BC0-4EDC-BD53-F0CFD121E1A0 () deployingradius ! com
[Download RAW message or body]

On Jun 26, 2018, at 5:53 PM, Guilherme Domingues \
<guilherme.domingues.oliveira@gmail.com> wrote:
> 
> We've looking for a simple solution to bypass pppoe request from canceled
> subscribers.
> 
> It's sounds odd, but some routers/onus from certain clients hits radius all
> day long, and we're think to access those devices again, by accepting their
> login(only CHAP) and configure this clients to DHCP networks.

  The typical solution is to accept these clients, and then to give them un-routable \
IPs.  That means they stop bugging the RADIUS server.  But also, their packets are \
dropped by the gateway as unroutable.

> In alternative of it, we've seen as soluction blocking at L2, but we're
> working with different models of NAS and switches and other networks
> devices.
> 
> For us is getting complicated for CHAP autentication. Someone have some
> idea or suggestion ?

  There's no mutual authentication in CHAP.  So you can just forcibly accept the \
user, and return Access-Accept.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]