different eap/tls config for different interfaces
Michael Griego
mgriego at utdallas.edu
Tue Aug 9 01:51:42 CEST 2005
I was gonna do that as part of my updates, but if you want to do this,
be my guest. :)
--Mike
Alan DeKok wrote:
>Michael Griego <mgriego at utdallas.edu> wrote:
>
>
>>Also, you can use the Packet-Dst-IP-Address attribute if you're certain
>>that the clients are split up by interface. You can match up based on
>>incoming interface like you were thinking about doing with two different
>>servers. So, if your server is listening on 10.0.0.1 and 10.0.1.1, and
>>your EAP modules are named EAPauth1 and EAPauth2, you could do:
>>
>>
>
> Hmm... I should update the EAP code so it sets Auth-Type to not EAP,
>but to it's instance name, if that exists. That will help this kind
>of configuration.
>
> Alan DeKok.
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>
More information about the Freeradius-Users
mailing list