Check out: http://wiki.freeswitch.org/wiki/ACL#Users It'll automatically add users with a cidr= attribute to the ACL list. This way you can set channel variables in the users and use them through your dialplan, all authenticated by ip address. Cheers, Mathieu Rene Avant-Garde Solutions Inc Office: + 1 (514) 664-1044 x100 Cell: +1 (514) 664-1044 x200 mrene@avgs.ca On 20-Dec-09, at 3:19 PM, Ahmed Naji wrote:
People,
Please do excuse me if this is a FAQ.
I've so far not worked out a way to implement IP authentication effectively. I have a number of gateways/end points/...etc. hitting the switch without registration and originating calls to a number of upstreams I have configured.
So far, everything is smooth and FREESwitch is legendary in every way. Over 10,000 simultaneous sessions at 120cps, on a dual-Xeon machine running CentOS and CPU usage is barely a blip.
My problem is authentication. I need a method to authenticate end points based only on their IP addresses. I am currently filtering access through the firewalls, but I would really like to delegate this task to FS in prep for an SBC setup I'm working on. If I remove the firewall filters, then anyone is able to get in.
I could't workout precisely how ACLs work in FS from the WiKi and the documentation, and I haven't been able to make sense of how Digest functions either.
Can anyone shed some light on those two areas ? I would like to really get to the bottom of this and update the WiKi pages with the working setup once done.
Regards,
Ahmed.
-- Ahmed A. Ibrahim-Naji Al-Alousi Ph.D., MIEE, MBCS _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org