Where do I add the config stuff to route requests based on attributes in a request?
Setup: WLAN Access Points providing multiple SSIDs for access to different VLANs. They talk to RADIUS server that should forward the requests to different other RADIUS servers based on which WLAN the clients are connecting to. SSID 'eduroam' should forward requests to the EDUROAM RADIUS server. SSID 'IFM' should forward requests to our internal RADIUS server. I'd see that in the incoming RADIUS request from the access points there is a Called-Station-Id that I'd like to use for this purpose. Now the question is - what do I write and in which config files to use this? The attribute typically looks like this: Called-Station-Id = "00-17-9A-D3-9A-BA:IFM" or Called-Station-Id = "00-17-9A-D1-67-CE:eduroam" (Access Points ethernet address, colon, and then the SSID). - Peter
Have a look at regexp operators: http://wiki.freeradius.org/Operators You can use unlang or users file. You just need to configure the one you want to proxy. Ivan Kalik Kalik Informatika ISP Dana 30/9/2008, "Peter Eriksson" <peter@ifm.liu.se> piše:
Setup:
WLAN Access Points providing multiple SSIDs for access to different VLANs.
They talk to RADIUS server that should forward the requests to different other RADIUS servers based on which WLAN the clients are connecting to.
SSID 'eduroam' should forward requests to the EDUROAM RADIUS server. SSID 'IFM' should forward requests to our internal RADIUS server.
I'd see that in the incoming RADIUS request from the access points there is a Called-Station-Id that I'd like to use for this purpose.
Now the question is - what do I write and in which config files to use this?
The attribute typically looks like this:
Called-Station-Id = "00-17-9A-D3-9A-BA:IFM"
or
Called-Station-Id = "00-17-9A-D1-67-CE:eduroam"
(Access Points ethernet address, colon, and then the SSID).
- Peter - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Peter Eriksson wrote:
Now the question is - what do I write and in which config files to use this?
$ man unlang
The attribute typically looks like this:
Called-Station-Id = "00-17-9A-D3-9A-BA:IFM"
if (Called-Station-Id =~ /regex/) { update control { Proxy-To-Realm := "foo" } } Alan DeKok.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alan DeKok wrote:
Peter Eriksson wrote:
Now the question is - what do I write and in which config files to use this?
$ man unlang
The attribute typically looks like this:
Called-Station-Id = "00-17-9A-D3-9A-BA:IFM"
if (Called-Station-Id =~ /regex/) { update control { Proxy-To-Realm := "foo" } }
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
http://www.ja.net/documents/services/janet-roaming/sussex-freeradius-case-st... JRS is the JANET implementation of Eduroam. Thanks, Arran - -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk), Authentication, Authorisation and Accounting Officer, Infrastructure Services (IT Services), E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT DDI+FAX: +44 1273 873900 | INT: 3900 GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkjicEIACgkQcaklux5oVKJVggCeIR2DQF7hZhCY3Fv+NEFebe+0 UOYAniJIG0wb66DzNlik1IDWIayeJro7 =98US -----END PGP SIGNATURE-----
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Peter Eriksson -
tnt＠kalik.net