Hi, > My problem is how to select the correct authorize > method of an instance depending on the NAS-IP-Address > of the Access-Request packet. For example, if the > NAS-IP-Address is a.b.c.d I would like to use the > authorize method of interface1 (and NOT the authorize > method of interface2 or interface3)
to seperate within the authorize section, you have set Autz-Type as well. That would be DEFAULT NAS-IP-Address == a.b.c.d, Auth-Type :=LDAP1, Autz-Type := LDAP1 DEFAULT NAS-IP-Address == a2.b2.c2.d2, Auth-Type :=LDAP2, Autz-Type := LDAP2 DEFAULT NAS-IP-Address == a3.b3.c3.d3, Auth-Type :=LDAP3, Autz-Type := LDAP3 (just always make sure that files is before the interfaceX bits, to ensure that Autz-Type is already set. You can then do > authorize{ > preprocess > suffix > files Autz-Type LDAP1 { interface1 } Autz-Type LDAP2 { interface2 } Autz-Type LDAP3 { interface3 } > } That should work, I did a very similar thing just last week :-) Greetings, Stefan Winter -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: [EMAIL PROTECTED] Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html