assigning vlan based on LDAP attribute
    Thibault Le Meur 
    Thibault.LeMeur at supelec.fr
       
    Fri Jul 28 22:36:34 CEST 2006
    
    
  
> One way to do that is to use LDAP groups. If your users are in 
> dedicated LDAP groups, then a rule like the following in your "users" 
> file will do the trick:
> DEFAULT Huntgroup-Name == myAP, Ldap-Group == Engineering
>        User-Name=`%{User-Name}`,
>        radiusTunnelMediumType: IEEE-802
>        radiusTunnelType: VLAN
>        radiusTunnelPrivateGroupId: 2
>        Fall-Through = no
Sorry... my mistake, use the following rule instead:
DEFAULT Huntgroup-Name == myAP, Ldap-Group == Engineering
       User-Name=`%{User-Name}`,
       Tunnel-Medium-Type=IEEE-802
       Tunnel-Private-Group-Id=2
       Tunnel-Type=VLAN
       Fall-Through = no
Thibault
    
    
More information about the Freeradius-Users
mailing list