Hello I hav working setup on freeradius 2.1.1, Novell eDir as authentication backend and couple of WiFi APs. PEAP and EAP-TTLS PAP and MSCHAPv2 WiFI access attribute is radiusEnableDialAccess Now i would also like to add openvpn access and use different attribute for that. So far I understand that somewhere sholud go unlang stanza something like If calling station IP is openvpnserverIP and attribute enableOvpnAccess is true then send Access-Accepted? Is this right direction to think? Whitch stanza it should go? Authorize? Andres
Andres Septer wrote:
Now i would also like to add openvpn access and use different attribute for that. So far I understand that somewhere sholud go unlang stanza something like If calling station IP is openvpnserverIP and attribute enableOvpnAccess is true then send Access-Accepted?
See the OpenVPN documentation for which attributes it needs.
Is this right direction to think? Whitch stanza it should go? Authorize?
Randomly trying things won't help. You need to read the documentation, and *understand* how FreeRADIUS works. The alternative is random changes, confusion, upset users, and *more* work and pain. Alan DeKok.
participants (2)
-
Alan DeKok -
Andres Septer