FreeRadius, three NAS types and users privileges

Alan DeKok aland at nitros9.org
Sun Jun 18 17:12:21 CEST 2006


Robert Hass <robhass at gmail.com> wrote:
> The problem is that DSL user can configure their PPPoE connection as
> username from Dial-Up user (eg. ppp/ppp) and there will be no
> rate-limit on his connection (VirtualAccess interface). Silimar problem
> with VPNs - sometimes we have duplicated login names...

  Duplicate names make it more complicated.  If the names were
unique. you'd just put the users into different groups.

> Is any way to resolv this issue other than installing 3 FreeRadiuses
> using different MySQL databases, and different TCP/UDP ports ?

  Configure 3 Autz-Type's.  (see doc/Autz-Type).  Put 3 SQL databases
in there, one for each cass of users.  In the "users" file, key off of
the Client-IP-Address, and set Autz-Type.

  Alan DeKok.




More information about the Freeradius-Users mailing list