groups with port permissions
Hi All, I'm new in FreeRadius. I have install freeRadius and ChillSpot on Debian with squid and iptables. Everything is ok, but I want to make a Group with port permissions. For exampel first group "Low" with only HTTP(S) permission, the second group "Mittel" with HTTP(S), POP(S), IMAP, SMTP(S) and the third group "Hi" with all permission (all ports). How can I do this? I have my hotspot in my caffe-bar and only customers can have a internet. Thanks for your help! PS: Sorry for my englisch :-) -- View this message in context: http://freeradius.1045715.n5.nabble.com/groups-with-port-permissions-tp43005... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Hi I think your best bet would be is to assign different ip pools for each of these groups on your NAS. Then use iptables an limit each ip group as you like. Regards Stephen On Wed, Apr 13, 2011 at 3:02 PM, subcode <subcode@gmx.de> wrote:
Hi All, I'm new in FreeRadius. I have install freeRadius and ChillSpot on Debian with squid and iptables. Everything is ok, but I want to make a Group with port permissions. For exampel first group "Low" with only HTTP(S) permission, the second group "Mittel" with HTTP(S), POP(S), IMAP, SMTP(S) and the third group "Hi" with all permission (all ports). How can I do this? I have my hotspot in my caffe-bar and only customers can have a internet.
Thanks for your help!
PS: Sorry for my englisch :-)
-- View this message in context: http://freeradius.1045715.n5.nabble.com/groups-with-port-permissions-tp43005... Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Stephen thank you for your answer! I try to do the groups but I don't know how. Where should I assign the pools ? I have FreeRADIUS Version 2.1.10 and In /etc/freeradius/modules/ippool i added: ippool lowpool { range-start = 192.168.181.129 range-stop = 192.168.181.254 netmask = 255.255.255.0 cache-size = 800 session-db = ${raddbdir}/db.iplowpool ip-index = ${raddbdir}/db.iplowindex override = no maximum-timeout = 0 } ippool mipool { range-start = 192.168.182.129 range-stop = 192.168.182.254 netmask = 255.255.255.0 cache-size = 800 session-db = ${raddbdir}/db.ipmipool ip-index = ${raddbdir}/db.ipmiindex override = no maximum-timeout = 0 } in /etc/freeradius/users added: DEFAULT Group == low, Pool-Name := "lowpool" DEFAULT Group == mi, Pool-Name := "mipool" and it's doesn't works :( can somebody help me?? Thanks a lot!!! -- View this message in context: http://freeradius.1045715.n5.nabble.com/groups-with-port-permissions-tp43005... Sent from the FreeRadius - User mailing list archive at Nabble.com.
participants (2)
-
Stephen Vigus -
subcode