It's easy! Just google for rlm_raw and use it with a SQL xlat rule to pick out the shared secret from a database. I have been doing this way for years... in FreeRADIUS v1 and v2. David coova.org

Date: Wed, 17 Dec 2008 10:16:17 +0200 From: Johan Meiring <jmeiring@pcservices.co.za> Subject: Re: Duplicate IPs for Radius Clients with different secrets To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4948B551.6030406@pcservices.co.za> Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Eric Geier wrote:

...

If I understand what you said, I would only need one IP entry (the Internet IP) in the config file for each location, right?

Most of these locations will be using dynamic Internet IPs; I'm not sure how'd I keep the config updated. Plus this would make each location/network use the same shared secret among all their APs, which I want to prevent.

Alan,

The Nas-Identifier being available to dynamic clients will also solve Eric's problem.

Any update on when it might be available?

Thanks!

--

Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782