different eap/tls config for different interfaces
Alan DeKok
aland at ox.org
Tue Aug 9 00:06:35 CEST 2005
Michael Griego <mgriego at utdallas.edu> wrote:
> Also, you can use the Packet-Dst-IP-Address attribute if you're certain
> that the clients are split up by interface. You can match up based on
> incoming interface like you were thinking about doing with two different
> servers. So, if your server is listening on 10.0.0.1 and 10.0.1.1, and
> your EAP modules are named EAPauth1 and EAPauth2, you could do:
Hmm... I should update the EAP code so it sets Auth-Type to not EAP,
but to it's instance name, if that exists. That will help this kind
of configuration.
Alan DeKok.
More information about the Freeradius-Users
mailing list