users rights seperations

[Ömer Tuğrul]

Hi,
my freeradius version is 2.1.4

I have network devices that I authenticate the network managers to console
these devices with radius server based on users file.
Now I need to use 802.1x authentication for wireless APs based on ldap
authentication.

My question is;
How can I seperate network management authentication and internet access
authentication rights? I mean, I don't want that some ldap users to console
my network devices. I just want to allow them to authenticate internet
access and some ldap users may console to devices.

firstly, I heard that i could use clients.conf file with virtual-server
parameter (and sites-enabled/virtual_server_ name...); but then I could only
use the authenticator-device for one method if I got it right. I am confused
there.

I am sorry if i am not clear, please let me know...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100628/907806bf/attachment.html>