Hi all,

I am trying to deny a user from logging in through a couple of nas I have on
my network. I am using freeradius 1.1.3 with mysql.

In my table radgroupcheck, I have added

Groupname Attribute Op Value
Dial-Up NAS-IP-Address != 1.1.1.1
Dial-Up NAS-IP-Address != 2.2.2.2

The SQL check always seems to return the last value of 2.2.2.2 and never
compare against the 1.1.1.1. If my user is connecting to 1.1.1.1 , they will
authenticate and be allowed online.

Can someone please point me in the correct direction to allow me to define
multiple nas servers that I can deny authentication from?

Thanks and happy holidays

Jeff

Try to add it like this:
Dial-Up NAS-IP-Address !~ (1.1.1.1|2.2.2.2)