hello all,
i am working on a project to deploy mac-based authentication via radius server.
the network is a 'WIRED' LAN,Although the Users will connect to the cisco router via point-to-point wireless connection.
the users,radius server and LAN interface of the router will all be connected to a switch (i hope the network layout is clear).The other interface of the router ultimately connects to the internet.
i believe i have successfully installed and configured the radius server (using the radtest utility to check)
my major pain is how to configure the NAS. The NAS is a cisco router.How do i configure the NAS to forward mac addresses to the radius server without asking for username/password?
i saw this configuration somewhere:
aaa new-model
aaa authentication ppp default if-needed group radius
aaa authorization network default group radius
aaa accounting update newinfo
aaa accounting exec default start-stop group radius
aaa accounting network default wait-start group radius
aaa accounting connection default start-stop group radius
in the above, i believe i have to make changes to the above configuration so that the NAS will forward mac addresses to radius server without prompting the user for anything (i.e username/password), but i dont know what and howto.
pls help,anyone.
PS: the radius server uses mysql as its backend.i also know that the mac-addresses of the users is stored as the username/password in the radcheck table.
thanks.

Radius Client For Windows

To connect to a virtual network over point-to-site (P2S), you need to configure the client device that you'll connect from. You can create P2S VPN connections from Windows, Mac OS X, and Linux client devices. When you're using RADIUS authentication, there are multiple authentication options. EX Series,QFX Series. You can permit devices that are not 802.1X-enabled LAN access by configuring MAC RADIUS authentication on the switch interfaces to which the.

Radius Client Is Nap Capable

You will need to do this for all wireless clients that you have the radius authentication setup for. Keep in mind this is just a fancy way of performing MAC address filtering. Because of this its a really bad way to secure your wireless. OS X 10.5 Server comes with a Radius server, but at the surface, it seems that Apple only ships with support for wireless access stations. However, the foundation is a fully working FreeRadius server.

Radius Client For Mac