You can use >= and <=. john Client-IP-Address >= 192.168.2.100, Client-IP-Address <= 192.168.2.103, Proxy-To-Realm := proxy Ivan Kalik Kalik Informatika ISP Dana 20/3/2007, "freeradius" <frml@r2sic.com> piše:
Yes you're right, I saw this wrong information in a non official radius forum,
Is there a way or another to check on a network basis like 192.168.2.100/30 ? In our productive architecture, the number of ip addresses should be a /21 subnet (2046 hosts)... I can write one line per ip but maybe there is a better way to configure it ?
Thanks, Philippe Bacquaert
Alan DeKok a écrit :
freeradius wrote: ...
The users file contains : john Client-IP-Address == 192.168.2.100/30, Proxy-To-Realm := proxy
Nothing in the documentation or examples says that the "IP/mask" format is valid. It's not. The server won't understand it.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html