Conditional radreply with Freeradius. Possible somehow ?

Alan DeKok aland at deployingradius.com
Wed May 26 09:18:49 CEST 2010


Pere Hospital wrote:
> So the logic of the process would be :
> 
> Receive auth request from VPN server
> ---> Authenticate/Authorize user (via radcheck, checking expiration
> date, number of simultaneous logins ...). ---> If NAS-Identifier = X
> then return (via radreply)  Framed-IP-Address=Y ---> If NAS-Identifier
> = Z then return (via radreply)  Framed-IP-Address=W ---> otherwise
> don't return a Framed-IP-Address
> 
> Is this possible somehow ?

  Yes.

> We are using SQL module in freeradius.

  See the Wiki for how the SQL module works.

  Though since these rules are NAS based and not user based, I would
suggest simply writing them in the configuration.  See "man unlang".

  And upgrade to 2.1.9...

  Alan DeKok.



More information about the Freeradius-Users mailing list