Matching a value within an IP subnet

[Alan DeKok]

Brian Candler wrote:
> Indeed it is not. But NAS-IP-Address is (natively) not a string in RADIUS
> either, it's a 4-byte integer.

  To be pedantic: an IPv4 address.

>  Does FreeRADIUS let me treat it as if it
> were a string?

  The operator you have chosen to use is: "=~".

  That is defined as doing a *regex* match.

  Regexes work on strings.

  IPv4 addresses can be printed to strings.

  So... regexes can match strings.

  You tried to use "=~" for comparing a *network mask*.

  That won't work.

  Regex matching is not the same as matching a network mask.

> DEFAULT		NAS-IP-Address =~ /^192\.0\.2\.([0-9]|1[0-9]|2[0-9]|3[01])$/, NAS-Group := "ADSL-BRAS"

  That should work.

  Alan DeKok.