[strongSwan] radius integration for leftsubnet ?

Oleksandr Yermolenko aae at sumix.com
Tue Jan 19 07:57:07 CET 2016


Hi,

Strongswan 5.3.5

options below works great.
     rightauth=eap-radius
     rightsourceip=%radius

But decided to ask despite I didn't find a magic word %radius for 
leftsubnet.

Is there any solution to change static string like
leftsubnet=10.32.1.0/24,10.52.3.0/24,10.52.1.0/24,10.22.1.0/24
to something diff in order to obtain routes from freeradius/ldap 
environment and push this info to clients?
...
(0) Framed-IP-Address := 172.16.232.254
(0) Framed-Route += "10.32.1.0/24 172.16.232.1/32 10"
(0) Framed-Route += "10.52.3.0/24 172.16.232.1/32 10"
(0) Framed-Route += "10.52.1.0/24 172.16.232.1/32 10"
(0) Framed-Route += "10.22.1.0/24 172.16.232.1/32 10"
...

Thanks a lot for advices and opinions

Oleksandr


More information about the Users mailing list