Hello Phil, Your solution is usable for very small number of NAS ; I will have many hundreds of nas .... It's why I talked about having some variable like virtual_server in clients.conf (or a custom attr like my-realm defined in dictionnary, configured in clients.conf and used with unlang %{client:my-realm} or something like that.
so : if ( "%{client:my-realm}" ) { But in fact, I don't know how specifying a virtual server in clients.conf could do a part of the job ... 2011/10/20 Phil Mayers <p.may...@imperial.ac.uk>: > On 10/20/2011 05:10 PM, Fred wrote: >> >> Hi all, >> >> Is there any way to select proxying or not based on client ip ? >> >> I would like to have >> * some nas authenticated locally (in fact via ldap) >> * some other nas proxyied to another radius. > > authorize { > if (Client-IP-Address == x.x.x.x) { > update control { > Proxy-To-Realm := OTHER > } > } > } > > ...then define the realm in proxy.conf as per examples. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html