Matching a prefix in huntgroups file

Alan DeKok aland at
Fri Nov 4 17:59:41 CET 2016

On Nov 4, 2016, at 12:57 PM, Brian Candler <b.candler at> wrote:
> On 04/11/2016 16:31, Brian Candler wrote:
>> But it won't match the supplied NAS-IP-Address. I have no problem with a simple == condition matching a single IP address though. 
> Supplementary question: I see in for freeradius 3.0.11:
> * "unlang" comparisons of IP addresses to IP prefixes are now
>   detected, and types automatically cast.
> But does that mean you can test for an IP address being within a prefix? If so, which operator would you use? I tried:
>    if (&NAS-IP-Address == { ...

  That should work.  There are tests for it.

  Or, just cast NAS-IP-Address to <ipv4prefix>

> but got no match. A string expansion works though:
>    if ("%{NAS-IP-Address}" =~ /^10\.254\./) { ...

  Which is also hugely slower, and less flexible.

  Alan DeKok.

More information about the Freeradius-Users mailing list