Using user groups to simply my config

Alan DeKok aland at
Fri Apr 15 16:43:39 UTC 2022

On Apr 15, 2022, at 12:41 PM, Jason Womack via Freeradius-Users <freeradius-users at> wrote:
> Here is what I have working if someone could provide a general sanity check.
> dictionary
> ATTRIBUTE       VLAN-Group-Name         3000    string

  That's fine.

> authorize file  #I created a bunch of just test users for using radtest
> AA-BB-CC-DD-EE-FF Cleartext-Password := "AA-BB-CC-DD-EE-FF", VLAN-Group-Name := "kids"
> A1-BB-CC-DD-EE-FF Cleartext-Password := "A1-BB-CC-DD-EE-FF", VLAN-Group-Name := "general"
> A2-BB-CC-DD-EE-FF Cleartext-Password := "A2-BB-CC-DD-EE-FF", VLAN-Group-Name := "iot"

  That works.

> in site configuration under post-auth
> ...
> This seems to accomplish the configuration I want to achieve using the config files.  Any issues with this approach?


  If it works, ship it!

  Alan DeKok.

More information about the Freeradius-Users mailing list