I was gonna do that as part of my updates, but if you want to do this, be my guest. :) --Mike Alan DeKok wrote:
Michael Griego <mgriego@utdallas.edu> wrote:
Also, you can use the Packet-Dst-IP-Address attribute if you're certain that the clients are split up by interface. You can match up based on incoming interface like you were thinking about doing with two different servers. So, if your server is listening on 10.0.0.1 and 10.0.1.1, and your EAP modules are named EAPauth1 and EAPauth2, you could do:
Hmm... I should update the EAP code so it sets Auth-Type to not EAP, but to it's instance name, if that exists. That will help this kind of configuration.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html