a check of the “Calling-Station-ID” (IETF Type ID 31 [text]) would be great to have.
with such a check we could limit the, for example, the IP addresses from which users are allowed to connect.
i tried adding the attribute:
(took the ID from the officials https://www.iana.org/assignments/radius-types/radius-types.xhtml )
/user-manager attribute
add name=Calling-Station-ID packet-types=access-challenge type-id=31 value-type=string
and also with
/user-manager attribute
add name=Calling-Station-ID packet-types=access-accept type-id=31 value-type=string
when this is added to a user nothing really happens … the user can still connect from ANY IP address, regardless of the IP which is entered for the user.