You can setup RADIUS, make users authenticate against it and assign IP stored in RADIUS srv. Then use plow(4) to account. This is just theory.
On 10 jan 2014, at 16:33, Some Developer <someukdevelo...@gmail.com> wrote: > I have a VPN server configured using L2TP and IPSec. Clients authenticate > using x509 certificates but I'd like to be able to be able to track the > bandwidth used by each client based on which x509 certificate they used to > authenticate with the VPN. > > I know that you can track types of connections etc with PF but I'm not sure > if you can track packets based on authentication such as this. Is this > possible to do at all? > > I'm still quite new to PF so I'm still trying to get an idea of what it is > capable of.
