Change Options based on Client

Paul paul at kullen.rwth-aachen.de
Mon Apr 16 15:17:27 CEST 2018


Hi,

I have 2 Clients configured named "Cisco" and "Unifi" and want to assign 
different VLANs based on the requesting client for each User individually.

client.conf:

client cisco{
ipaddr= 1xx.xx.x.109
secret          = F***
}

client unifi{
ipaddr= 1xx.yyy.zz.100
secret          = H***
}

Here is a "pseudo"-Config for the user:

#TestforDynamicVLAN-Assignment
test      Cleartext-Password := "test"
             if (client == cisco){ # PSEUDO-Config
                 Tunnel-Type = 13,
                 Tunnel-Medium-Type = 6,
                 Tunnel-Private-Group-Id = 500
             }
             if (client == unifi){ # PSEUDO-Config
                 Tunnel-Type = 13,
                 Tunnel-Medium-Type = 6,
                 Tunnel-Private-Group-Id = 1000
             }

I couldn't find any documentation on changing attributes based on the 
requesting client. Is there such an option?

If no: Do you have any idea for an easy and scalable fix?

I could run two separate Radius-Sever but this would reduce maintainability.

Thanks!

Paul




More information about the Freeradius-Users mailing list