disable available EAP types for certain caller-id?

[Kacper Wirski]

Hello,

I'd like to limit EAP types available depending on called-station-id (ip 
addresses only for EAP-TLS.

Would something like this - in general - in my "default" site work?

Maybe there is a better way to achieve the same thing? Overall I want to 
use other EAP-types, so I can't just comment them out in eap module, but 
I'd like to filter them for specific connections.

I'm using latest stable Freeradius (3.0.21)

authorize {

...

     if (&Called-Station-Id == "<my-public-ip>" &&   &EAP-Type != EAP-TLS) {

             reject

     }

     eap {

         ok  = return

     }

.....

}


Regards,

Kacper




-- 
Ta wiadomość została sprawdzona na obecność wirusów przez oprogramowanie antywirusowe Avast.
https://www.avast.com/antivirus