Problems on replying attributes
Marco Miglietta
marco.miglietta at unisalento.it
Tue Apr 21 22:15:31 CEST 2020
Thank you v.m. Alan.
I give a look.
Il 21/04/20 22:06, Alan DeKok ha scritto:
> On Apr 21, 2020, at 3:28 PM, Marco Miglietta <marco.miglietta at unisalento.it> wrote:
>> I use radius to authenticate users accessing VPN.
>> The NAS in this case is a VPN gateway and I need each user to have their fixed IP address accessing the private network. This in order to discriminate what he can do.
>> Therefore, in the authentication process radius replies to NAS the IP address to assign to vpn client throught Framed-IP-Address attribute.
>> If user requests connection to another VPN gateway, obviously I need radius assigns a different IP address corrisponding to the subnets managed by that gateway.
>> Except for the initial configuration now I use Daloradius to manage the radius database, so I have few experience with configuration files
>> This is the scenario.
>> I'm looking for a suggestion to know what I can do or on which configuration files I have to operate.
> You need to edit sites-enabled/default, and edit the "authorize" section.
>
> This kind of thing is difficult (if not impossible) to configure in a web UI, so editing the configuration files is your best bet.
>
> There are many examples in the configuration files of how to create policies. You should read them, and run the server in debugging mode to see what it's doing.
>
> If you use a careful and slow process, then the configuration should be done quickly. Ask questions if you're unsure.
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
--------------------------------------------------------------------------------------
*Ing. Marco Miglietta*
*Universita' del Salento*
Ripartizione Tecnica e Tecnologica - Area Gestione Infrastrutture
Ex Collegio Fiorini - Via per Arnesano - Monteroni di Lecce (LE) - ITALY
tel: +39 0832 299050/299058 - fax: +39 0832 299998
mob: +39 320 9223913
skype: marcomiglietta
mail: marco.miglietta at unisalento.it
web: www.unisalento.it <http://www.unisalento.it>
--------------------------------------------------------------------------------------
More information about the Freeradius-Users
mailing list