final version of ikev2/rw-eap-tnc-radius scenario

2010-10-05 20:38:34 +02:00
parent 9ffa3f71f2
commit 48e16e0ae1
5 changed files with 33 additions and 8 deletions
@@ -18,13 +18,13 @@ post-auth {
 	if (control:TNC-Status == "Access") {
 		update reply {
 			Tunnel-Type := ESP 
-			Filter-Id := "rw-access"
+			Filter-Id := "access"
 		}
 	}
 	elsif (control:TNC-Status == "Isolate") {
 		update reply {
 			Tunnel-Type := ESP 
-			Filter-Id := "rw-isolate"	
+			Filter-Id := "isolate"	
 		}
 	}

@@ -11,12 +11,14 @@ conn %default
 	keyingtries=1
 	keyexchange=ikev2

-conn rw-allow
+conn rw-access
+	rightgroups=access
 	leftsubnet=10.1.0.0/28
 	also=rw-eap
 	auto=add

 conn rw-isolate
+	rightgroups=isolate
 	leftsubnet=10.1.0.16/28
 	also=rw-eap
 	auto=add