different eap/tls config for different interfaces

Alan DeKok aland at ox.org
Tue Aug 9 00:06:35 CEST 2005


Michael Griego <mgriego at utdallas.edu> wrote:
> Also, you can use the Packet-Dst-IP-Address attribute if you're certain 
> that the clients are split up by interface.  You can match up based on 
> incoming interface like you were thinking about doing with two different 
> servers.  So, if your server is listening on 10.0.0.1 and 10.0.1.1, and 
> your EAP modules are named EAPauth1 and EAPauth2, you could do:

  Hmm... I should update the EAP code so it sets Auth-Type to not EAP,
but to it's instance name, if that exists.  That will help this kind
of configuration.

  Alan DeKok.



More information about the Freeradius-Users mailing list