Freeradius configuration

When configuring Freeradius server always do minor changes do the configuration files and check changes step by step. Alway check debug output radiusd -X

Filtering of reply AVPs

It may be sometimes useful to filter out certain attributes according to the given policy. Following example removes checks IP address of the NAS and removes Aruba-User-Vlan AVP.

post-auth {
       if("%{NAS-IP-Address}" == '10.120.24.4') {
                update reply {
                        Reply-Message := "Hello, %{User-Name}"
                        Aruba-User-Vlan !* ANY
                }
        }
}