Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Sep 2000 21:26:57 -0700 (PDT)
From:      Archie Cobbs <archie@whistle.com>
To:        Ben Schumacher <ben@henshaw.net>
Cc:        freebsd-net@FreeBSD.ORG
Subject:   Re: netgraph based MAC authentication
Message-ID:  <200009190426.VAA01480@bubba.whistle.com>
In-Reply-To: <5.0.0.25.2.20000913221340.00a04950@pop.henshaw.net> "from Ben Schumacher at Sep 13, 2000 10:27:17 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Ben Schumacher writes:
> I'm working on a project where I need to be able to authenticate people by 
> their MAC address against a RADIUS server.  While looking into the best way 
> to develop this, I starting toying around with netgraph and think it is the 
> perfect framework for what I'm trying to do.  Basically what I'm going to 
> need to do (AFAIK) is divert the packets coming from one ethernet card 
> (dc0) to my netgraph node, verify their MAC address, and then push their 
> packet on its way.  However, I'm still not entirely certain how to 
> implement this.

You might be able to do this without writing your own node.
Just use ng_bpf(4) and maintain the BPF program to match the
MAC addresses you want to accept.

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200009190426.VAA01480>