Setting different IDLE-TIMEOUTS based on IP Address

Matthew Newton mcn4 at
Wed Apr 17 21:38:36 CEST 2013


On Wed, Apr 17, 2013 at 12:32:32PM -0500, John Giordano wrote:
> So in huntgroups I have:
> MSP7345   NAS-IP-Address =~ /^10\.99\.3\./
> SNJ7000   NAS-IP-Address =~ /^10\.3\.99\./
> LAB7000   NAS-IP-Address =~ /^192\.168\.0./

Testing it here, I'm not convinced that =~ is working in the
huntgroups file, which slightly surprises me.

To test, what happens if you temporarily add this instead

LAB7000 NAS-IP-Address ==


If you put the following after the 'preprocess' line in
sites-enabled/default, you should get the Huntgroup-Name expand
and display in the debug output... is it being set?

if ("%{Huntgroup-Name}") {

> +- entering group authorize {...}
> [preprocess]    expand: %{NAS-IP-Address} ->
> [preprocess]    expand: %{NAS-IP-Address} -> <--------------- Does this mean that the huntgroups file is being checked? Perhaps a regex thing?
> [preprocess]    expand: %{NAS-IP-Address} ->
> ++[preprocess] returns ok

huntgroups is definitely being read (it's read by preprocess), but
the lines might not be being matched.


Matthew Newton, Ph.D. <mcn4 at>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at>

More information about the Freeradius-Users mailing list