Re: Different source NAS for Differnet privilege Level

2006-03-16 Thread Alan DeKok
Jeff Stout [EMAIL PROTECTED] wrote:
 I need to have different privilege levels based upon which NAS they
 are coming from, eg... Connecting while on the Corporate Network
 privilege level = 8, same user Connecting thru IPass out of the office
 privilege level = 5.
 
 Any assistance with this would be greatly appreciated.

  Key off of the Client-IP-Address, which is the IP of the NAS.

  You could use NAS-IP-Address or NAS-Identifier, but they are less
reliable in proxy situations.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Different source NAS for Differnet privilege Level

2006-03-16 Thread Alex M
I think you can use radreply directive with your variable, if your NAS
supports that.




-Original Message-
From:
[EMAIL PROTECTED]
.org
[mailto:[EMAIL PROTECTED]
eeradius.org] On Behalf Of Jeff Stout
Sent: Thursday, March 16, 2006 11:44 AM
To: FreeRadius users mailing list
Subject: Different source NAS for Differnet privilege Level

I am using freeradius rev 1.1.0 I have everything running great
I am using AAA authorization on different Network Devices,
Cisco Routers, Cisco Switches, Foundry Switches, Juniper FW's.

I have setup VSA's to respond to the user to set their privilege level
upon successful authentication, then the authorization portion actually
sets the privilege level

I need to have different privilege levels based upon which NAS they
are coming from, eg... Connecting while on the Corporate Network
privilege level = 8, same user Connecting thru IPass out of the office
privilege level = 5.

Any assistance with this would be greatly appreciated.

Thank you in advance for your help

Jeff Stout
CCT
- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html