Hi,
I would like to authorize a given user to some services depending on the
NAS he is connected to. Basically I would like to have something like
that :
user Auth-Type :=EAP
if
NAS-IP-Addr == 10.10.10.10
then
AUTHORIZATION_AVP1 = x1,
AUTHORIZATION_AVP2 = y1
else
AUTHORIZATION_AVP1 = x2,
AUTHORIZATION_AVP2 = y2
endif
I tried the following syntax :
user Auth-Type := EAP
NAS-IP-Addr == 10.10.10.10, Tunnel-Type = VLAN,
Tunnel-Medium-Type = dot1q, Tunnel-Private-Group-ID = MyVlan
Fall-Through = 1
NAS-IP-Addr != 10.10.10.10, Tunnel-Type = VLAN,
Tunnel-Medium-Type = dot1q, Tunnel-Private-Group-ID = MyOtherVlan
I get the error : Parse error (reply) for entry user: expecting '=' ....
at the first line where I have DEFAULT NAS-IP-Addr == 10.10.10.10 .....
Please, can you help ?
In a more general case, is there a doc on the various operators (==, =,
:=, +=, etc) we can use une the "users" file ? any *complex* examples
somewhere ?
Many thanks
David.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html