2013-03-08 - [GRASE-Hotspot] Disable MAC token.

Header Data

From: Pablo Arango Correa <pa***o@psl.com.co>
Message Hash: cf14a5a47084677cf6bd56aaaa921c4270cc59f545d43cbcd285eec22e9f2484
Message ID: <B3927F11C872D64EAF092F537F1C37660EE1FB1F@jupiter.pslcol.com.co>
Reply To: N/A
UTC Datetime: 2013-03-08 12:05:23 UTC
Raw Date: Fri, 08 Mar 2013 19:05:23 +0000

Raw message 


Hello,

Guys, is it possible to disable the mac token that authenticates a user session?: E.g. This is an example URL, I need to disable the mac argument...

http://10.1.0.1/grase/uam/hotspot?res=notyet&uamip=10.1.0.1&uamport=3990&challenge=21802cf54c8ef9eceb6a01f3a594c605&called=YY-YY-YY-YY-YY-YY&mac=XX-XX-XX-XX-XX-XX&ip=10.1.0.11&nasid=nas01&sessionid=513a30af00000003&userurl=http%3a%2f%2fwww.google.com%2f

The situation is as follows:

I want to set grase at the WAN side of a wireless router (DLink DIR-615). But the problem is that since the mac session verification exists, when the first user authenticates through the router's wireless network the whole network gets internet access. Its verifying the router's MAC, not the client's MAC (that's how a router should work anyway...). So, can I disable this? Or do you recommend another configuration?


Thanks a lot!


Kindly,

Pablo Arango Correa
Ingeniero de Infraestructura IT / IT Infrastructure Engineer

[http://www.psl.com.co/logo_psl_firma.jpg]
Productora de Software S.A.
www.psl.com.co<http://www.psl.com.co/> / www.pslcorp.com<http://www.pslcorp.com>
Tel (+574)  3 72 20 22 ext 4121

Nota de Confidencialidad
Este correo y cualquier archivo anexo pertenecen a PSL S.A. y son para uso exclusivo del destinatario intencional.
Esta comunicación puede contener información confidencial o de acceso privilegiado. Si usted ha recibido este correo por error,
equivocación u omisión favor notificar en forma inmediata al remitente y eliminar dicho mensaje con sus anexos.
Por favor considere el medio ambiente antes de imprimir este email.

Confidentiality Note
This e-mail and any attached files belong to PSL S.A. and they are for the sole use of the intended recipient(s).
This communication may contain confidential or privileged information. If you are not the intended recipient,
please contact the sender by replying to this e-mail and destroying all copies of the original message.
Please consider the environment before printing this e-mail.


"While one person hesitates because he feels inferior, the other is busy making mistakes and becoming superior"
- Henry C. Link

Thread