RE: NAS-IP-Address groupcheck item

["Jeff Crowe" <listacct@genhex.net>]

 

On Dec 27, 2007 3:28 PM, Jeff Crowe <listacct@genhex.net> wrote:

Hi all,

I am trying to deny a user from logging in through a couple of nas I have on
my network.  I am using freeradius 1.1.3 with mysql.

In my table radgroupcheck, I have added

Groupname   Attribute     Op  Value
Dial-Up    NAS-IP-Address != 1.1.1.1
Dial-Up    NAS-IP-Address != 2.2.2.2

The SQL check always seems to return the last value of 2.2.2.2 and never
compare against the 1.1.1.1.  If my user is connecting to 1.1.1.1 , they will
authenticate and be allowed online.

Can someone please point me in the correct direction to allow me to define
multiple nas servers that I can deny authentication from?

Thanks and happy holidays

Jeff

 

Try to add it like this:
Dial-Up   NAS-IP-Address !~ (1.1.1.1|2.2.2.2)

Kind regards
Y.

 

Hi Yves,

 

thank you very much - it works perfectly.

 

Regards,

Jeff.