[rbak-nsp] Static CLIPS with MAC authentication.

[Denis Mikhaylovskiy]

Hey Ilya,

Actually there is no static clips in your config :).
It is just binding of pvc using subscriber record. But any way static clips as well as pvc binding doesn't demultiplex incoming traffic on per MAC, it does only on per source IP.
If you'd like to demultiplex incoming traffic based on MACs you then have only one option is dynamic clips (means DHCP).

P.S. You can run DHCP server on SmartEdge for instance.


Hope it helps.
/denis
________________________________
From: redback-nsp-bounces at puck.nether.net [mailto:redback-nsp-bounces at puck.nether.net] On Behalf Of Илья Савин
Sent: Friday, April 16, 2010 2:54 PM
To: redback-nsp at puck.nether.net
Subject: [rbak-nsp] Static CLIPS with MAC authentication.

Hi.

I am using static clips. Here is config:

[static]Redback#sh conf
Building configuration...

Current configuration:
!
context static
!
 no ip domain-lookup
!
 interface lena multibind
  ip address 80.76.187.1/24<http://80.76.187.1/24>
!
subscriber name 00:0c:29:84:db:13
   ip address 80.76.187.2
   qos policy policing 1m_p
   qos policy metering 1m_m
!
 ip route 0.0.0.0/0<http://0.0.0.0/0> context bgp
!
...........
port ethernet 2/3
 no shutdown
 encapsulation dot1q
 dot1q pvc 8
  bind subscriber 00:0c:29:84:db:13 at static
  service clips
!
end

So, host 80.76.187.2 gets access to the Internet with specified qos parameters. But MAC address, specified as subscriber's username, does not affect on anything. Host authenticated by IP address, not by MAC address.

Can I authenticate subscribers by MAC address? Or at least bind MAC address to subscriber (for example, by MAC-ACL).

WBR,
Ilya Savin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20100416/dc398036/attachment.html>