[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: Allow requests even if the MAC is not allowed?
From:       Alan DeKok <aland () deployingradius ! com>
Date:       2023-10-30 14:50:25
Message-ID: 7906E616-566A-4602-B44E-C083C7A455A0 () deployingradius ! com
[Download RAW message or body]

On Oct 30, 2023, at 10:03 AM, Florian Traxler (mieX GmbH) <traxler@miex.co> wrote:
> Can you allow requests via DHCP in FreeRadius 3.0.20 even if the MAC is not \
> allowed?

  Sure.  Just write the policy rules to do that.

  I'm not sure why you would _add_ rules saying "the MAC isn't allowed", and then \
decide that the MAC is still allowed.  That seems like a lot of work for little \
benefit.

> Example:
> () sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username \
> = '00:00:00:AA:BB:CC' ORDER BY id () sql: Executing select query: SELECT id, \
> username, attribute, value, op FROM radcheck WHERE username = '00:00:00:AA:BB:CC' \
> ORDER BY id () sql: WARNING: User not found in radcheck table.
> 
> Can I still assign an IP from the IP pool to this MAC?

  Yes.  Just write the rules to do that.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]