Conditional radreply with Freeradius. Possible somehow ?
Alan DeKok
aland at deployingradius.com
Wed May 26 09:18:49 CEST 2010
Pere Hospital wrote:
> So the logic of the process would be :
>
> Receive auth request from VPN server
> ---> Authenticate/Authorize user (via radcheck, checking expiration
> date, number of simultaneous logins ...). ---> If NAS-Identifier = X
> then return (via radreply) Framed-IP-Address=Y ---> If NAS-Identifier
> = Z then return (via radreply) Framed-IP-Address=W ---> otherwise
> don't return a Framed-IP-Address
>
> Is this possible somehow ?
Yes.
> We are using SQL module in freeradius.
See the Wiki for how the SQL module works.
Though since these rules are NAS based and not user based, I would
suggest simply writing them in the configuration. See "man unlang".
And upgrade to 2.1.9...
Alan DeKok.
More information about the Freeradius-Users
mailing list