<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2912" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=malicious_male_20@yahoo.com
href="mailto:malicious_male_20@yahoo.com">c k</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=freeradius-users@lists.freeradius.org
href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, August 08, 2006 6:33
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> (no subject)</DIV>
<DIV><BR></DIV>
<DIV>I m using EAP-TLS as an authentication protocol.I want to authorize the
clients in my network to access only certain protocol traffics.For some users
i want to allow only http,while for others http and <A
href="ftp://ftp.How">ftp.How</A> can i create such kind of profiles and
perform access control on routers.Sorry friends i m new to radius...plz help
me out.</DIV>
<DIV> </DIV></BLOCKQUOTE>
<DIV><FONT face=Arial size=2>You need router that supports that kind of thing.
Something like named access lists. Then you use freeradius to send access list
name to router. Try to find what attributes your router can receive from radius.
Try googling something like "your router name radius attributes".</FONT></DIV>
<DIV><FONT face=Arial size=2>If not, you can use diferent pools for users that
have ftp access and user that don't have ftp access. For those pools you setup
diferent access lists. After that you just use freeradius to give diferent IP
adresses to users that have ftp access and users that don't have ftp
access.</FONT></DIV></BODY></HTML>