On 02/06/11 16:17, DaveA wrote:

Alan DeKok wrote:
  >  Proxying.  Set up a minimal virtual server that proxies to others.

Okay, this makes sense, but I am still unclear as to where to make the
differentiation between NAS-Port-Types.

What I envision is something like:
If (NAS-Port-Type == Virtual ) {
        Home_server = admincli
        }
Elsif (NAS-Port-Type == Ethernet ) {
        Home_server = 8021x
        }

authorize {
  ...
  if (NAS-Port-Type == Virtual) {
    update control {
      Proxy-To-Realm := ADMIN_SERVER
    }
  }
  # N.B. maybe do this instead
  elsif (EAP-Message) {
    update control {
      Proxy-To-Realm := EAP_SERVER
    }
  }
  ...
}

..and in proxy.conf:

home_server EAP {
  type = auth+acct
  virtual_server = eap
}
home_server_pool EAP_POOL {
  home_server = EAP
}
realm EAP_SERVER {
  pool = EAP_POOL
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to