On 29 Sep 2011, at 18:23, andreapepa wrote:

Yes there two kind of mikrotik nas, one is a cpe to connect users lan by 5GHz
wireless bridge and the ohter is a classical access point to give access to
wireless clients.

I've inserted this at the end of policy section in policy.conf but seems not
to be read:

Yes you need to call it in the server config.

sites-available/default

authorize {
...
autz_by_frequency
}


policy.conf

policy {
    autz_by_frequency {
        if(Called-Station-Id =~ /:WiNET-TR5G^/ && User-Name != 'usercpe01'){
reject
}
}
}

Arran Cudbard-Bell
a.cudbardb@freeradius.org

Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !