Multiple NAS-IP-Address check attributes in FreeRadius?

is it possible to have an OR statement in freeradius check attributes?

I have say 10 VPN servers that authenticate from freeradius. Most users can access all servers but I have a demo user that can only access 2 of those servers.

I can set this up so that the demo can only access 1 of the servers by putting the following in the radcheck table/users file

NAS-IP-Address==xxx.xxx.xxx.1

But I need to have and OR statement in there like:

NAS-IP-Address==xxx.xxx.xxx.1 OR xxx.xxx.xxx.2

Is this possible in freeradius?


You can use the =~ operator, and a regex xxx.xxx.xxx.1|xxx.xxx.xxx.2

Reference: http://freeradius.1045715.n5.nabble.com/Logical-OR-with-Check-Attributes-td3265998.html