reject proxy users

Roar Pettersen roar.pettersen at uib.no
Sun Jan 6 20:59:30 CET 2008


Hi !


We have a FreeRadius-1.1.7 which proxy radius request
from several vpn servers. We need to reject students
connecting to a employee vpn server.

raddb/users :

DEFAULT Realm == "student", NAS-IP-Address == 10.0.0.4, Auth-Type := 
Reject
         Reply-Message =  "No VPN Access for students on 10.0.0.4",
         Fall-Through = 0

DEFAULT Realm == "student.domain.com", NAS-IP-Address == 10.0.0.4, 
Auth-Type := Reject
         Reply-Message =  "No VPN Access for students on 10.0.0.4",
         Fall-Through = 1

The first with realm "student" doesn't work, but the last with
realm "student.domain.com" does work.

If I change the realm's then the first one always doesn't work,
and the last one always work.



--
Med vennlig hilsen / Regards;

   Roar Pettersen
   roar.pettersen at it.uib.no - http://www.uib.no



More information about the Freeradius-Users mailing list