how to define ACL like things in RADIUS

[Parashar Singh]

Hi
I have configure Radius server with LDAP authentication, for performing AAA
for Cisco Routers and Firwalls. Currently all users created in LDAP are
getting equal priviledge of accessing all devices (NAS) configured with AAA.
I want to allow a set of users to let access some devices (say only few
routers) while to allow other set of users with access permission of all
devices (including Routers and Firwalls).
I am aware of  following:


root         Auth-Type := Accept
                Reply-Message = "Your account has been disabled."

 which deny all access to user root. But I want some modification, i.e. root
user will able to authenticate to only two NAS, 192.168.1.178 &
192.168.1.179.

Pls suggest some solution.

Please guide me and help me to implement above scenario.

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090512/77cd05bd/attachment.html>