Re: Using groups to configure access based on particular requesting radius server.

Mike Cisar [EMAIL PROTECTED] wrote: Likewise is != valid here? Such that the following would be a valid representation... DEFAULT Client-IP-Address == ip1.of.pool.a., Group != poola, Auth-Type := Reject Yes. With only two pools I suppose it wouldn't really make much difference,

RE: Using groups to configure access based on particular requesting radius server.

Thanks Alan Denying from a group I can do... but how to deny from a group conditionally on which radius server the request is coming from is what I can't quite figure. DEFAULT Group == poola, Client-IP-Address == ip.of.pool.a., Auth-Type := Reject I was sure it'd be something

Re: Using groups to configure access based on particular requesting radius server.

Mike Cisar [EMAIL PROTECTED] wrote: My problem/question is this... is it possible to set up somehow so that I can create a couple of Unix groups (call them poola and poolb) and then control whether the login is denied partially on the RADIUS server that is asking. I would suggest using

Using groups to configure access based on particular requesting radius server.

I'm hoping someone may be able to give me some pointers or thoughts. I have a scenario where we have two separate external organizations who provide service to our dialup customers. Each of these companies has their own RADIUS servers which accept the request from whichever of the 1000's of NAS'