different eap/tls config for different interfaces

Michael Griego mgriego at utdallas.edu
Tue Aug 9 01:51:42 CEST 2005

I was gonna do that as part of my updates, but if you want to do this, 
be my guest.  :)


Alan DeKok wrote:

>Michael Griego <mgriego at utdallas.edu> wrote:
>>Also, you can use the Packet-Dst-IP-Address attribute if you're certain 
>>that the clients are split up by interface.  You can match up based on 
>>incoming interface like you were thinking about doing with two different 
>>servers.  So, if your server is listening on and, and 
>>your EAP modules are named EAPauth1 and EAPauth2, you could do:
>  Hmm... I should update the EAP code so it sets Auth-Type to not EAP,
>but to it's instance name, if that exists.  That will help this kind
>of configuration.
>  Alan DeKok.
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

More information about the Freeradius-Users mailing list