From owner-freebsd-net Mon Sep 18 21:27:34 2000 Delivered-To: freebsd-net@freebsd.org Received: from whistle.com (s205m131.whistle.com [207.76.205.131]) by hub.freebsd.org (Postfix) with ESMTP id D958B37B423 for ; Mon, 18 Sep 2000 21:27:31 -0700 (PDT) Received: (from smap@localhost) by whistle.com (8.10.0/8.10.0) id e8J4RQH09114; Mon, 18 Sep 2000 21:27:26 -0700 (PDT) Received: from bubba.whistle.com( 207.76.205.7) by whistle.com via smap (V2.0) id xma009108; Mon, 18 Sep 2000 21:26:57 -0700 Received: (from archie@localhost) by bubba.whistle.com (8.9.3/8.9.3) id VAA01480; Mon, 18 Sep 2000 21:26:57 -0700 (PDT) (envelope-from archie) From: Archie Cobbs Message-Id: <200009190426.VAA01480@bubba.whistle.com> Subject: Re: netgraph based MAC authentication In-Reply-To: <5.0.0.25.2.20000913221340.00a04950@pop.henshaw.net> "from Ben Schumacher at Sep 13, 2000 10:27:17 pm" To: Ben Schumacher Date: Mon, 18 Sep 2000 21:26:57 -0700 (PDT) Cc: freebsd-net@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL82 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Ben Schumacher writes: > I'm working on a project where I need to be able to authenticate people by > their MAC address against a RADIUS server. While looking into the best way > to develop this, I starting toying around with netgraph and think it is the > perfect framework for what I'm trying to do. Basically what I'm going to > need to do (AFAIK) is divert the packets coming from one ethernet card > (dc0) to my netgraph node, verify their MAC address, and then push their > packet on its way. However, I'm still not entirely certain how to > implement this. You might be able to do this without writing your own node. Just use ng_bpf(4) and maintain the BPF program to match the MAC addresses you want to accept. -Archie ___________________________________________________________________________ Archie Cobbs * Whistle Communications, Inc. * http://www.whistle.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message