Thursday, December 19, 2019

Free Radius Servers with scalable MAB list?

Hi guys,

Does anyone know of any freeware radius servers that support MAB in a scalable/manageable way? - ie just a lookup to an external list/file that we can easily add new macs into.

Ideally it would just be a list we can append single device mac addresses into (however, we are talking thousands of mac addresses)

This is part of a requirement we have been asked to look at as an interim solution, before we deploy more network segmentation / Proper PNAC/Identity profiling next financial year (I have highlighted that MAB is not secure however people still want to investigate it as an interim solution)

I've looked at the documentation for free-radius however the MAB functionality looks like some esoteric regex pattern matching. what we want to do it export known mac addresses from something like solarwinds UDT and import these into a single MAB list within a radius server - oh did I mention that this has to be free !



No comments:

Post a Comment