On Tue, Sep 18, 2012 at 9:24 PM, lscrlstld <lscrls...@gmail.com> wrote: > Is there any way to ensure (or check) that the proxied server assigned a > right framed IP within a specific range of IPs? > unlang perhaps? > > Main Server proxy to +-> freeradius Server 1 > | (must be use ip pool 10.0.0.0/24) > +------+ > | | > | +-> freeradius Server 2 > | (must be use ip pool 10.0.1.0/24) > | > Main server check if the framed IP is within the correct pool, if not > reject.
IMHO a cleaner solution would be for you to assign the IP addresses yourself. Failing that, perhaps some unlang in post-proxy or post-auth might work. -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html