Freeradius, IPSK and Database

[Julian1]

Hi all,

Thanks for reading!

I am looking for a way to use IPSK authentication with a Freeradius server and a database that stores the allowed mac addresses. Is there anyone already have installed something like that?

I am thinking about something like:

The psk is the same for all users. If the MAC address is in the database table the radius server should authorise the client and assign vlan X. If the MAC address is not in the table but the psk is correct vlan Y should be assigned.

[GIdenJoe]

You could return the same psk for each user or group.
You will also need to make a DEFAULT section as described in the meraki document https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_with_RADIUS_Authentication to allow for unknown mac addresses.
In the reply for the known users you can override the VLAN.

I found a reference how to make user groups on https://stackoverflow.com/questions/71863025/freeradius-3-mac-auth-user-group-for-configuration-simp...

Good luck!