> Ben Thompson wrote:
> > The trouble is I need to assign different VLAN's to users depending
> > which access point they connect from. What I would like to know is if it
> > is possible to use Huntgroups to look up the VLAN id based on something
> > like the IP address of the access point?
> You could test the variable "Client-IP-Address" in the users file.
> testuser Client-IP-Address == 10.0.0.1, Password := "azerty"
> Tunnel-Private-Group-ID:1 := 1,
> Fall-Through = Yes
> testuser Client-IP-Address == 10.0.0.2, Password := "azerty"
> Tunnel-Private-Group-ID:1 := 2,
> Fall-Through = Yes
> Nicolas Baradakis
Thanks for that advice. I can see that I could end up with a very large
users file using this method. Is there any limit on the size of the
users file? In the near future we may have something like 800000 entries
in there. Is this where you would normally look to use a database
Re: Require NAS dependant radius return attributes
On Wed, 2005-08-17 at 10:51 -0400, Alan DeKok wrote:
> Ben Thompson <[hidden email]> wrote:
> > Thanks for that advice. I can see that I could end up with a very large
> > users file using this method. Is there any limit on the size of the
> > users file?
> Memory. Also, the CPU time required to walk it's internal
> representation (linked list).
> > In the near future we may have something like 800000 entries in
> > there. Is this where you would normally look to use a database
> > backend?
> Yes. Or, if the mappings are relatively simple, you could look at
> rlm_passwd, which does simple mappins. It uses a hash to look up
> data, so it should be fast.
> Alan DeKok.
Thanks for the info, I will have a look at rlm_passwd.
Meanwhile I have tested a setup using the huntgroups file combined with
the use of mutliple DEFAULT entries in the users file like this :-
This cuts the potential size of my users file down to about 20000
entries and the huntgroups file to about 50 entries. Does this sound
reasonable? I am currently running on a dual Xeon 2.8Ghz with 2GB of RAM
which is dedicated to running FreeRADIUS.