Christopher Carver wrote:
In radgroupcheck set up something like this:
+----+-------------+------------------+----+-------------+ | id | GroupName | Attribute | op | Value | +----+-------------+------------------+----+-------------+ | 1 | restricted | Called-Station-ID | == | 1112223333 | | 2 | restricted | Auth-Type | := | reject | +----+-------------+------------------+----+-------------+
The thing a lot of people mess up is they don't realize Auth-Type := reject needs to go in radgroupcheck not radgroupreply.
Yes, thats exactly what I've done, except for Called-Station-Id value i used "number,number,number". That seems to give an error. Adding the Auth-Type := Reject results in every login attempt being incorrect .