Multiple NAS-IP-Address check attributes in FreeRadius?
is it possible to have an OR statement in freeradius check attributes?
I have say 10 VPN servers that authenticate from freeradius. Most users can access all servers but I have a demo user that can only access 2 of those servers.
I can set this up so that the demo can only access 1 of the servers by putting the following in the radcheck table/users file
NAS-IP-Address==xxx.xxx.xxx.1
But I need to have and OR statement in there like:
NAS-IP-Address==xxx.xxx.xxx.1 OR xxx.xxx.xxx.2
Is this possible in freeradius?
You can use the =~
operator, and a regex xxx.xxx.xxx.1|xxx.xxx.xxx.2
Reference: http://freeradius.1045715.n5.nabble.com/Logical-OR-with-Check-Attributes-td3265998.html