different eap/tls config for different interfaces

Michael Griego mgriego at utdallas.edu
Tue Aug 9 01:51:42 CEST 2005


I was gonna do that as part of my updates, but if you want to do this, 
be my guest.  :)

--Mike


Alan DeKok wrote:

>Michael Griego <mgriego at utdallas.edu> wrote:
>  
>
>>Also, you can use the Packet-Dst-IP-Address attribute if you're certain 
>>that the clients are split up by interface.  You can match up based on 
>>incoming interface like you were thinking about doing with two different 
>>servers.  So, if your server is listening on 10.0.0.1 and 10.0.1.1, and 
>>your EAP modules are named EAPauth1 and EAPauth2, you could do:
>>    
>>
>
>  Hmm... I should update the EAP code so it sets Auth-Type to not EAP,
>but to it's instance name, if that exists.  That will help this kind
>of configuration.
>
>  Alan DeKok.
>- 
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>  
>



More information about the Freeradius-Users mailing list