Bypass SQLIPPOOL via variable?

Blake Covarrubias blake at covarrubi.as
Thu Nov 1 21:28:19 CET 2012


On Nov 1, 2012, at 1:02 PM, bearon at gmail.com wrote:

> If they are coming in as a "Virtual" connection, drop out of SQLIPPOOL and just let freeradius auth the connection and then let OpenVPN use it's predefined IP pool which we will in turn NAT?

This should be possible with a bit of unlang.

post-auth {
  if(NAS-Port-Type != Virtual){
    sqlippool
  }
}

Or something of the sort. 'man 5 unlang' for more info.

--
Blake Covarrubias


More information about the Freeradius-Users mailing list