[RADIATOR] Dynamic VLAN assignment based on AD group membership

[Hugh Irvine]

Hello Neil -

There are a variety of ways of doing this, but if you only have two groups you can use two AuthBy clauses like this:


.....

	AuthByPolicy ContinueUntilAccept

	<AuthBy ....>
		.....
		Group ITS-STAFF
		AddToReply Tunnel-Private-Group-ID = ....., \
			.....
	</AuthBy>

	<AuthBy ....>
		.....
		Group ITS-STUDENTS
		AddToReply Tunnel-Private-Group-ID = ....., \
		.....
	</AuthBy>

.....


regards

Hugh
		


On 29 Apr 2010, at 02:36, Johnson, Neil M wrote:

>  
> Would anyone be willing to share their ideas on how to do Dynamic VLAN assignment based on one’s member ship in an Active Directory Group using Radiator?
>  
>  I know  how return the actual Radius attributes to assign VLANS (Tunnel-Private-Group-ID, etc.).
>  
> What I’m looking for is how to define those attributes based on a user’s membership in an AD group.
>  
> So for example:
>  
> User1 is in AD group “ITS-STAFF” they get assigned to one VLAN
> User2 is in AD group “ITS-STUDENTS” they get assigned to a different VLAN.
>  
> I’m assuming that I will need to use a  hook.
>  
> Thanks.
> -Neil
>  
> --
> Neil Johnson
> Network Engineer
> Information Technology Services
> The University of Iowa
> Work: 319 384-0938
> Mobile: 319 540-2081
> Fax: 319 355-2618
> E-mail: neil-johnson at uiowa.edu
>  
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB: 

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets), 
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.