how to disable a particular EAP type in freeradius2 for a particular ESSID ?

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Fri Feb 10 18:54:24 CET 2012


Yes. Perfectly possible...just need to make copies of the 'files' module file, then give it is name (as per docs), then out a different users file in the second copy. In the virtual server you can then call the copy of the files module that uses that different file.


Personally I'd just use one small bit of unlang eg

if(%{Called-Station-Id} ~= /:ssid$/i && EAP-Type = EAP-TLS) {
access-reject
}

(example quick code!)...this assumes the request coming from the AP/controller has the SSID embedded in it.....

alan

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120210/fc31b6d3/attachment.html>


More information about the Freeradius-Users mailing list