NAS IP address for usergroup

Alan DeKok aland at deployingradius.com
Fri Sep 4 15:54:21 CEST 2015


On Sep 4, 2015, at 9:31 AM, Tevfik Ceydeliler <tevfik.ceydeliler at astron.yasar.com.tr> wrote:
> Does NAS-IP-Address attribute  work under user group?

  Yes.

> +----+-----------------------+------------------------+-----+------------------+
> | id | groupname       | attribute              | op | value     |
> +----+---------------+--------------------------------+----+-------------- -----+
> | 45 | UGR_Test_Wifi | NAS-IP-Address | == | 10.65.8.117 |
> +----+-----------------------+-------------------------+----+-------------------+

  Which tells the server to match the NAS-IP-Address... but doesn't tell the server to DO anything.

> I test it but user can get access-accept" from dşfferent NAS also
> Or something wrong?

  If you want the server to reject from different NASes, then you need to write that:

	NAS-IP-Address != 10.65.8.117 
	Auth-Type := Reject

  Alan DeKok.





More information about the Freeradius-Users mailing list