RadGraph - a tool to return VLAN ID and Class attributes based on Entra Groups

[John Cleary]

Hi all,

First, I have to say THANK-YOU to the whole FreeRADIUS team. I love this product!! :)

I hope this is an appropriate place to share this!

I’ve been using FreeRADIUS with great success for the past 6 months to do wired and wireless auth for the school network I managed.

We’re a Microsoft 365 house, and I’m trying to deprecate on-prem NPS, hence the move to FreeRADIUS. We’re using EAP-TLS with user certs issued via Intune (from an on-prem NDES for now, hopefully sth else soon!).

Because I need users dropped into different VLANs during the Wi-Fi auth, and to also supply RADIUS “Class” attributes to my Fortigate for RSSO based internet filtering, I built a ‘plugin’ solution for FreeRADIUS that uses the “exec” module to run a lookup during auth.

I thought I’d share it here in case it’s useful to others!

https://github.com/johnclearyconsulting/radgraph

Thanks again,
John

--
John Cleary
Melbourne, Australia

+61 417 143 312
john at cleary.au