I hav working setup on freeradius 2.1.1, Novell eDir as authentication backend and couple of WiFi APs. 

PEAP and EAP-TTLS 

PAP and MSCHAPv2

WiFI access attribute is radiusEnableDialAccess

Now i would also like to add openvpn access and use different attribute for that.

So far I understand that somewhere sholud go unlang stanza

something like

If calling station IP is openvpnserverIP and attribute enableOvpnAccess is true then send Access-Accepted? 

Is this right direction to think?
Whitch stanza it should go? Authorize?

Andres