On Tue, Sep 18, 2012 at 9:49 PM, lscrlstld <lscrls...@gmail.com> wrote: >> > Main server check if the framed IP is within the correct pool, if not >> > reject. >> >> IMHO a cleaner solution would be for you to assign the IP addresses >> yourself. >> > Yeap, I think so too. > But how to do this if the authentication is done on a remote server?
Also using unlang in post-proxy/post-auth :) See "man unlang" on how to remove an attribute. As an alternative, see raddb/modules/attr_filter, which basically can filter-out attributes you don't want (in this case, Framed-IP-Address) -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html