Sure, you can do almost anything with the radius attributes that come in.
You could do
DEFAULT Calling-Station-Id != "3333333333", Auth-Type := Reject
Fall-Through = no
That would reject anyone that is not from that number. If you are more
specific on what is coming in and what you want to block or allow, someone
on the list can probably get into more details.
If you want to only allow people from a certain NAS, it would be something
like
DEFAULT NAS-IP-Address != "x.x.x.x", Auth-Type := Reject.
Or you can use huntgroups.
Or Called-Station-Id, etc....
You can use any attribute that comes in the access-request and do whatever
you want with it. Do man 5 users and read the man page on the users file.
That will show you all the combinations of operators (=, :=, !=, etc..)
and how to use them.
On Wed, 29 Dec 2004, Lito Lampitoc wrote:
> thanks! can I also limit a dial-up to a specific phone number?
>
> On Tue, 2004-12-28 at 14:43 -0500, Dustin Doris wrote:
> > Yep. Check out man 5 users.
> >
> > ie:
> >
> > DEFAULT Calling-Station-Id == 3333333333
> > Framed-IP-Address = 10.10.10.1
> > Framed-IP-Netmask = 255.255.255.0
> >
> > Or you can use a backend to store this information, such as ldap or mysql.
> >
> >
> > On Wed, 29 Dec 2004, Lito Lampitoc wrote:
> >
> > > Is it possible to assign an IP address to a certain phone number that
> > > dials up? if it is, how?
> > >
> > >
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See
> > > http://www.freeradius.org/list/users.html
> > >
> >
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
