denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added eap-radius-filter_id option to strongswan.conf

Browse Source
This commit is contained in:
Andreas Steffen
2010-10-11 12:20:45 +02:00
parent 456a4f398e
commit f2b1aa4962
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/strongswan.conf.5.in
+13
View File
@@ -223,6 +223,19 @@ option in
.BR charon.plugins.eap-radius.eap_start " [no]" .BR charon.plugins.eap-radius.eap_start " [no]"
Send EAP-Start instead of EAP-Identity to start RADIUS conversation Send EAP-Start instead of EAP-Identity to start RADIUS conversation
.TP .TP
.BR charon.plugins.eap-radius.filter_id " [no]"
If the RADIUS
.I tunnel_type
attribute with value
.B ESP
is received, use the
.I filter_id
attribute sent in the RADIUS-Accept message as group membership information that
is compared to the groups specified in the
.B rightgroups
option in
.B ipsec.conf (5).
.TP
.BR charon.plugins.eap-radius.id_prefix .BR charon.plugins.eap-radius.id_prefix
Prefix to EAP-Identity, some AAA servers use a IMSI prefix to select the Prefix to EAP-Identity, some AAA servers use a IMSI prefix to select the
EAP method EAP method