user group allowed just a specific device.

Arran Cudbard-Bell a.cudbardb at
Wed Jul 26 18:38:59 CEST 2017

You can copy it to a temporary attribute and then evaluate that .

update request {
	Tmp-IP-Address-0 := “%{Packet-Src-IP-Address}"
if (<ipv4prefix>Tmp-IP-Address-0 <

It’ll be fixed in v4 to the workaround won’t be required.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP
URL: <>

More information about the Freeradius-Users mailing list