Configuration conflict
Sven Hartge
sven at svenhartge.de
Wed Jul 22 08:31:59 CEST 2020
On 22.07.20 05:02, Olivier wrote:
> I am facing the following problem and I don't know how to configure
> FreeRadius for that.
>
> I have one WiFi Access point serving 2 SSID with 802.1x enabled.
>
> One SSID takes authentication in the form of username at domain.example and
> the other is just username.
>
> As it is a single AP, it communicates to FreeRadius with a single IP and
> is being seen as a single Radius client. Is there a way for me to
> declare different virtual servers.
>
> Is there a way to sort that elegantly beaside using the value of
> Stripped_User_Domain (and equivalent)?
>
> What would be the solution if I add to add a 3rd SSID, with
> authentication that does not use a domain (but has a different list of
> users of course)?
Look at the attributes the AP sends if the SSID is somewhere in there.
Some append it to the Calling-Station-Id like
"00-11-22-33-44-55:eduroam" while others (like Aruba) send a separate
attribute "Aruba-Essid-Name".
Based on that you then can use unlang to do whatever you want.
Grüße,
Sven.
More information about the Freeradius-Users
mailing list