default vlan for ldap users

Alan DeKok aland at
Tue May 2 16:46:18 CEST 2006

Nuno Reis <nuno.mrr at> wrote:
> Is there any way to make freeradius assign a vlan to any user that was
> authenticated using active directory database? Something like, freeradius
> asks active directory for user authenticity, and if accepted, freeradius
> forwards always the same tunnel-pvt-group-id to NAS.

  You can do this in the post-auth section.

  Usually, though, it's easier to just always assign them to a VLAN
group.  If they're rejected they won't use it, and if they're accepted
they will.

  Alan DeKok.

More information about the Freeradius-Users mailing list