How to Restrict a Group of Users to a certain NAS or groups of NAS?
Hello, Im new on this of FreeRADIUS but while I was reading and getting more knowledge about... I got a question, How to Restrict a User or Group of Users to a certain NAS or groups of NAS? Sorry for my misspellings.... Thanks at all!
I got a question, How to Restrict a User or Group of Users to a certain NAS or groups of NAS?
I'm not an experienced freeradius user too, but I have the setup where there are different certificate OUs for wired and wireless access. What I came up with is to give each NAS a "shortname" option in clients configuration. Then distingiushing between access servers is a simple check of the "client:shortname" variable. Hopefully, it's possible to do the same for groups of users and access servers too. For the latter I suggest looking up huntgroups configuration (then use the Huntgroup-Name variable).
Hello, As already said, you may use Huntgroups : - A table contains NAS IP addresses and corresponding Huntgroup - then you can use a check (user or group level) like Huntgroup-Name == nas-group to restrict users to this group of NAS. We used this trick to assign different VLANs to our users depending on the location of the NAS. Regards. Le 27/10/2016 à 04:29, Jose Quezada a écrit :
Hello,
Im new on this of FreeRADIUS but while I was reading and getting more knowledge about... I got a question, How to Restrict a User or Group of Users to a certain NAS or groups of NAS?
Sorry for my misspellings....
Thanks at all! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Philippe MARASSE Responsable pôle Infrastructures - DSIO Centre Hospitalier Henri Laborit CS 10587 - 370 avenue Jacques Cœur 86021 Poitiers Cedex Tel : 05.49.44.57.19
participants (3)
-
Alexander Sergeyev -
Jose Quezada -
Philippe MARASSE