On Nov 1, 2012, at 1:02 PM, bea...@gmail.com wrote: > If they are coming in as a "Virtual" connection, drop out of SQLIPPOOL and > just let freeradius auth the connection and then let OpenVPN use it's > predefined IP pool which we will in turn NAT?
This should be possible with a bit of unlang. post-auth { if(NAS-Port-Type != Virtual){ sqlippool } } Or something of the sort. 'man 5 unlang' for more info. -- Blake Covarrubias - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html