Thank You for quick response, Regards, Kaper W dniu 07.01.2021 o 15:28, Alan DeKok pisze:
On Jan 7, 2021, at 8:24 AM, Kacper Wirski <kacper.wirski@gmail.com> wrote:
I'd like to limit EAP types available depending on called-station-id (ip addresses only for EAP-TLS.
Would something like this - in general - in my "default" site work?
Maybe there is a better way to achieve the same thing? Overall I want to use other EAP-types, so I can't just comment them out in eap module, but I'd like to filter them for specific connections. If you need to filter EAP types for certain connections, then "unlang" if / then / else rules is the best way.
I'm using latest stable Freeradius (3.0.21)
authorize { ... if (&Called-Station-Id == "<my-public-ip>" && &EAP-Type != EAP-TLS) { reject That should work.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Ta wiadomość została sprawdzona na obecność wirusów przez oprogramowanie antywirusowe Avast. https://www.avast.com/antivirus