Hi,<div><br></div><div>I want to use the same freeradius server for authenticate several services like L2TP VPN, PPPoE server, captive portal, etc... </div><div><br></div><div>For example:</div><div><br></div><blockquote class="gmail_quote" style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">

NAS-&gt;PPPoE Server (11-11-11-11-11-11)<br>NAS-&gt;Captive portal (22-22-22-22-22-22)<br></blockquote><blockquote class="gmail_quote" style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">

 </blockquote><blockquote class="gmail_quote" style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
In the MySQL radcheck table:<br>
</blockquote><blockquote class="gmail_quote" style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> </blockquote>

<blockquote class="gmail_quote" style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">user1 Cleartext-Password := 1234<br>

user1 Called-Station-Id := 11-11-11-11-11-11<br>user2 Cleartext-Password := 5678<br>user2 Called-Station-Id := 22-22-22-22-22-22</blockquote><div><br></div><div>I would like to know what is the best way to achieve it. I don&#39;t know if it is best using several virtual servers, one per service, or through the called-station-id with the same virtual server. Is it possible to evaluate a request based on the NAS&#39; called station id (regardless the user/pass)?</div>

<div><br></div><div>In the above example, when the user1 try to login into the captive portal the freeradius should send an access-reject. Which is the best way?</div><div><br></div><div>Thanks,</div><div>David</div>