Two routers using the same Radius server?

Jonathan De Graeve Jonathan.De.Graeve at imelda.be
Wed Dec 14 10:04:08 CET 2005


Client ip adres in combination with huntgroups if you work with a mysql
db and usergroups

-- 
Jonathan De Graeve
Network/System Administrator
Imelda vzw
Informatica Dienst
015/50.52.98
jonathan.de.graeve at imelda.be

---------
Always read the manual for the correct way to do things because the
number of incorrect ways to do things is almost infinite
---------

-----Oorspronkelijk bericht-----
Van: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] Namens Mark
Tunnell
Verzonden: woensdag 14 december 2005 1:59
Aan: FreeRadius users mailing list
Onderwerp: Re: Two routers using the same Radius server?

Nice!  That gets me almost all the way there.  I'm able to
authenticate using Auth-Type := Local.  Now I just need to figure out
how to authenticate that type of user name (user at realm) using
Auth-Type := System.  Any ideas how to go about that?

Thanks,

Mark

Lewis Bergman wrote:
> Mark Tunnell wrote:
> 
>> Suppose I have two Cisco routers both configured to authenticate to
>> the same radius server.  How do I allow a particular user access to
>> one router but not the other?  Is there a place in the clients.conf
or
>> users file to configure this?
>>
> Oh yea, Alan gave me a trick with the hints file that adds a realm to
a
> client if one is not present that could also help.
> DEFAULT User-Name !~ ".*@", NAS-IP-Address == "ip of client"
>         User-Name := "%{User-name}@realmtoadd.com"
> 
- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html







More information about the Freeradius-Users mailing list