Re: [Ipsec-tools-devel] sa-up and sa-down scripts

[<ma...@ne...>]

Kimmo Koivisto <kim...@su...> wrote:

> With proper script, administrator could assign the same IP for the same Client
> ID. 
> 
> <script>
> if ID eq "CN=Someuser" then 
>  return {
>         ip4 10.0.0.7;
>         netmask4 255.255.255.0;
>         dns4 10.0.12.1;
>         wins4 10.0.12.1;
>  }
> else
>  return {
>         network4 10.0.0.0;
>         netmask4 255.255.255.0;
>         dns4 10.0.12.1;
>         wins4 10.0.12.1;
>   }
> fi

Hum, that's much more complicated, because we'd have to parse what the
script returns. 

Note that if you use hybrid auth with a RADIUS server, you can configure
static IP easily (and probably in a way that is easier to manage on a
large scale system) 

-- 
Emmanuel Dreyfus
Il y a 10 sortes de personnes dans le monde: ceux qui comprennent 
le binaire et ceux qui ne le comprennent pas.
ma...@ne...