FreeRADIUS Beginner's Guide

Time for action – filtering reply attributes returned by a home server

The following actions have to be carried out on the my-org.com FreeRADIUS server:

1. Edit the sites-enabled/default file located under the FreeRADIUS configuration directory and uncomment the attr_filter.post-proxy line under the post-proxy section:

   #  Uncomment the following line if you want to filter
   #  replies from remote proxies based on the rules defined
   #  in the 'attrs' file.
   attr_filter.post-proxy

2. Edit the attrs file under the FreeRADIUS configuration directory and add the following entry before the DEFAULT entry:

   your-org.com
       Reply-Message =* ANY,
       Tunnel-Type := VLAN,
       Tunnel-Medium-Type := IEEE-802,
       Tunnel-Private-Group-Id := "100"

3. Restart the FreeRADIUS server in debug mode ...