Thanks Fajar.

         In previous mail, "Push Policy" means Radius Attribute only. I am using EAP-TLS and When a client  sends a radius request with username "user1" to radius server. In access accept I am able to see attributes configured in users file being returned.

In /etc/raddb/users file
user1   Cleartext-Password := "user1"
              Tunnel-Type := 13,
              Tunnel-Medium-Type := 6,
              Tunnel-Private-Group-Id := "guest",
        LVL7-Wireless-Client-Policy-Dn := "policy1",



Similarly for a usergroup say "usergroup1"   I should send radius attributes.. Also with client Mac which can be seen in radius request as calling station id.

Can we do it from modifying config files instead of modifying sql database?

Regards,
Subhani

On Sun, Sep 30, 2012 at 4:35 PM, Fajar A. Nugraha <list@fajar.net> wrote:
On Sun, Sep 30, 2012 at 4:53 PM, Subhani sk m <subhani19.cool@gmail.com> wrote:
> Hi,
>
>  I am using free radius on Linux, Fedora 13. I am able to push policy for a
> user.. I need help on two scenarios given below.
>
> 1.how to push policy for a specific usergroup from free radius sever
>

Depends on what you mean by "push policy". If it's just "return some
radius attribute"), then if you use database, simply put it on
radgroupreply table. See the included documentation, or
http://wiki.freeradius.org/modules/Rlm_sql

> 2. how to push a policy for a specific Calling-Station-ID like
> 00:16:6F:A2:XX:XX [ no user specific policy returned]

Short version? Use unlang (http://freeradius.org/radiusd/man/unlang.html)

--
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html