Dynamic Attributes Based on NAS Type !
Hi Everyone ... Currently i am planning to integrate freeradius with different NAS like Chillispot , Cisco etc and enable roaming users so that they can log in from any of the NAS. As the reply items are different with different NAS , i am looking for ideas how to enable a single user to roam and connect from different NAS. In my case i think static reply items are not possible per user wise or per groupwise so my question is what trick can be used to achieve the same. I had not tried anything as i have no clue on the same so some highlights on the approach will be a good starting point for me. Cheers Suman
Suman, As you did not say anything about the exact attributes, you will send to the NAC, here is how we do this: we are also using different NAS and have to reply with different VSAs for setting up the QOS. We use the "existence of a specific VSAs" (specified per NAS type) in the request to select the VSAs to be used in responses. e.g: if we found the Starent Networks VSA 'SN-Service-Type' in the request, we reply with 'SN-QOS-Profile' to set up QoS This is save, as we won't see any Starent VSAs in Cisco or Chillispot NASses. To make this flexible, we have set up our own VSA to configure users QOS, which is then translated into the specific reply attributes for the NAS, the user is currently using. Regards Stefan From: freeradius-users-bounces+a.freeradius=premit.de@lists.freeradius.org [mailto:freeradius-users-bounces+a.freeradius=premit.de@lists.freeradius.org ] On Behalf Of Suman Dash Sent: Saturday, October 08, 2011 4:40 PM To: FreeRadius users mailing list Subject: Dynamic Attributes Based on NAS Type ! Hi Everyone ... Currently i am planning to integrate freeradius with different NAS like Chillispot , Cisco etc and enable roaming users so that they can log in from any of the NAS. As the reply items are different with different NAS , i am looking for ideas how to enable a single user to roam and connect from different NAS. In my case i think static reply items are not possible per user wise or per groupwise so my question is what trick can be used to achieve the same. I had not tried anything as i have no clue on the same so some highlights on the approach will be a good starting point for me. Cheers Suman
The general idea is to setup a virtual server for each type of NAS and make sure, that every NAS is loaded into the correct virtual server. With best regards, ________________________________ Norbert Wegener Siemens IT Solutions and Services AIS MS NC PSU SDC Bruchstraße 5 45883 Gelsenkirchen, Germany Tel.: +49 (209) 94565716 Fax: +49 (201) 8165581284 mailto:norbert.wegener@atos.net Atos IT Solutions and Services GmbH; Geschäftsführung: Winfried Holz, Christian Oecking, Rainer-Christian Koppitz; Vorsitzender des Aufsichtsrats: Charles Dehelly; Sitz der Gesellschaft: München, Deutschland; Registergericht: München, HRB 184933. ________________________________ Von: freeradius-users-bounces+norbert.wegener=atos.net@lists.freeradius.org [freeradius-users-bounces+norbert.wegener=atos.net@lists.freeradius.org]" im Auftrag von "Suman Dash [sumandash@gmail.com] Gesendet: Samstag, 8. Oktober 2011 16:39 Bis: FreeRadius users mailing list Betreff: Dynamic Attributes Based on NAS Type ! Hi Everyone ... Currently i am planning to integrate freeradius with different NAS like Chillispot , Cisco etc and enable roaming users so that they can log in from any of the NAS. As the reply items are different with different NAS , i am looking for ideas how to enable a single user to roam and connect from different NAS. In my case i think static reply items are not possible per user wise or per groupwise so my question is what trick can be used to achieve the same. I had not tried anything as i have no clue on the same so some highlights on the approach will be a good starting point for me. Cheers Suman
Norbert, sorry, but you are taking a sledgehammer to crack the nut. If you read it one of the ideas of having different virtual servers is separation of policies for different NASses you are right. Suman was asking on how to send several NASses into the same policy. Regards Stefan From: freeradius-users-bounces+a.freeradius=premit.de@lists.freeradius.org [mailto:freeradius-users-bounces+a.freeradius=premit.de@lists.freeradius.org ] On Behalf Of Wegener, Norbert Sent: Saturday, October 08, 2011 8:02 PM To: FreeRadius users mailing list Subject: AW: Dynamic Attributes Based on NAS Type ! The general idea is to setup a virtual server for each type of NAS and make sure, that every NAS is loaded into the correct virtual server. With best regards, _____ Norbert Wegener Siemens IT Solutions and Services AIS MS NC PSU SDC Bruchstraße 5 45883 Gelsenkirchen, Germany Tel.: +49 (209) 94565716 Fax: +49 (201) 8165581284 mailto:norbert.wegener@atos.net Atos IT Solutions and Services GmbH; Geschäftsführung: Winfried Holz, Christian Oecking, Rainer-Christian Koppitz; Vorsitzender des Aufsichtsrats: Charles Dehelly; Sitz der Gesellschaft: München, Deutschland; Registergericht: München, HRB 184933. _____ Von: freeradius-users-bounces+norbert.wegener=atos.net@lists.freeradius.org [freeradius-users-bounces+norbert.wegener=atos.net@lists.freeradius.org]" im Auftrag von "Suman Dash [sumandash@gmail.com] Gesendet: Samstag, 8. Oktober 2011 16:39 Bis: FreeRadius users mailing list Betreff: Dynamic Attributes Based on NAS Type ! Hi Everyone ... Currently i am planning to integrate freeradius with different NAS like Chillispot , Cisco etc and enable roaming users so that they can log in from any of the NAS. As the reply items are different with different NAS , i am looking for ideas how to enable a single user to roam and connect from different NAS. In my case i think static reply items are not possible per user wise or per groupwise so my question is what trick can be used to achieve the same. I had not tried anything as i have no clue on the same so some highlights on the approach will be a good starting point for me. Cheers Suman
I personnally use post-auth sections of each of my virtual server to send diffrenet attributes. I find It to be very clean way to achieve this. regards Le 08/10/2011 20:02, Wegener, Norbert a écrit :
The general idea is to setup a virtual server for each type of NAS and make sure, that every NAS is loaded into the correct virtual server.
With best regards,
------------------------------------------------------------------------ Norbert Wegener Siemens IT Solutions and Services AIS MS NC PSU SDC Bruchstraße 5 45883 Gelsenkirchen, Germany Tel.: +49 (209) 94565716 Fax: +49 (201) 8165581284 mailto:norbert.wegener@atos.net
Atos IT Solutions and Services GmbH; Geschäftsführung: Winfried Holz, Christian Oecking, Rainer-Christian Koppitz; Vorsitzender des Aufsichtsrats: Charles Dehelly; Sitz der Gesellschaft: München, Deutschland; Registergericht: München, HRB 184933. ------------------------------------------------------------------------ *Von:* freeradius-users-bounces+norbert.wegener=atos.net@lists.freeradius.org [freeradius-users-bounces+norbert.wegener=atos.net@lists.freeradius.org]" im Auftrag von "Suman Dash [sumandash@gmail.com] *Gesendet:* Samstag, 8. Oktober 2011 16:39 *Bis:* FreeRadius users mailing list *Betreff:* Dynamic Attributes Based on NAS Type !
Hi Everyone ... Currently i am planning to integrate freeradius with different NAS like Chillispot , Cisco etc and enable roaming users so that they can log in from any of the NAS.
As the reply items are different with different NAS , i am looking for ideas how to enable a single user to roam and connect from different NAS.
In my case i think static reply items are not possible per user wise or per groupwise so my question is what trick can be used to achieve the same.
I had not tried anything as i have no clue on the same so some highlights on the approach will be a good starting point for me.
Cheers Suman
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- <http://www.horoa.net> Alexandre Chapellon Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
I would like to have some insight in using virtual servers. But I am really stuck at the point that if i use virtual server how will be the DB entry look like i.e radreply / radgroup reply ? As far i understand , the reply attributes with value should be available in the reply table which matches to those of the NAS. Regards Suman On Sun, Oct 9, 2011 at 4:32 PM, Alexandre Chapellon <a.chapellon@horoa.net>wrote:
I personnally use post-auth sections of each of my virtual server to send diffrenet attributes. I find It to be very clean way to achieve this.
regards
Le 08/10/2011 20:02, Wegener, Norbert a écrit :
The general idea is to setup a virtual server for each type of NAS and make sure, that every NAS is loaded into the correct virtual server.
With best regards,
------------------------------**------------------------------** ------------
Norbert Wegener Siemens IT Solutions and Services AIS MS NC PSU SDC Bruchstraße 5 45883 Gelsenkirchen, Germany Tel.: +49 (209) 94565716 Fax: +49 (201) 8165581284 mailto:norbert.wegener@atos.**net <norbert.wegener@atos.net>
Atos IT Solutions and Services GmbH; Geschäftsführung: Winfried Holz, Christian Oecking, Rainer-Christian Koppitz; Vorsitzender des Aufsichtsrats: Charles Dehelly; Sitz der Gesellschaft: München, Deutschland; Registergericht: München, HRB 184933. ------------------------------**------------------------------** ------------ *Von:* freeradius-users-bounces+**norbert.wegener=atos.net@** lists.freeradius.org <atos.net@lists.freeradius.org>[freeradius-users-bounces+ **norbert.wegener=atos.net@**lists.freeradius.org<atos.net@lists.freeradius.org>]" im Auftrag von "Suman Dash [sumandash@gmail.com] *Gesendet:* Samstag, 8. Oktober 2011 16:39 *Bis:* FreeRadius users mailing list *Betreff:* Dynamic Attributes Based on NAS Type !
Hi Everyone ... Currently i am planning to integrate freeradius with different NAS like Chillispot , Cisco etc and enable roaming users so that they can log in from any of the NAS.
As the reply items are different with different NAS , i am looking for ideas how to enable a single user to roam and connect from different NAS.
In my case i think static reply items are not possible per user wise or per groupwise so my question is what trick can be used to achieve the same.
I had not tried anything as i have no clue on the same so some highlights on the approach will be a good starting point for me.
Cheers Suman
- List info/subscribe/unsubscribe? See http://www.freeradius.org/** list/users.html <http://www.freeradius.org/list/users.html>
Alexandre Chapellon
Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/**alxgomz<http://www.twitter.com/alxgomz>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/** list/users.html <http://www.freeradius.org/list/users.html>
Suman Dash wrote:
I would like to have some insight in using virtual servers. But I am really stuck at the point that if i use virtual server how will be the DB entry look like i.e radreply / radgroup reply ?
Exactly the same. You just have check && reply attributes.
As far i understand , the reply attributes with value should be available in the reply table which matches to those of the NAS.
Sure. You don't really need a virtual server for that, though. Alan DeKok.
participants (5)
-
Alan DeKok -
Alexandre Chapellon -
Stefan A. -
Suman Dash -
Wegener, Norbert