git.ipfire.org Git - thirdparty/strongswan.git/blob

   1 server inner-tunnel-second {
   2
   3 authorize {
   4         eap_tnc {
   5                 ok = return
   6         }
   7 }
   8
   9 authenticate {
  10         eap_tnc
  11 }
  12
  13 session {
  14         radutmp
  15 }
  16
  17 post-auth {
  18         if (control:TNC-Status == "Access") {
  19                 update reply {
  20                         Tunnel-Type := ESP
  21                         Filter-Id := "allow"
  22                 }
  23         }
  24         elsif (control:TNC-Status == "Isolate") {
  25                 update reply {
  26                         Tunnel-Type := ESP
  27                         Filter-Id := "isolate"
  28                 }
  29         }
  30
  31         Post-Auth-Type REJECT {
  32                 attr_filter.access_reject
  33         }
  34 }
  35
  36 } # inner-tunnel-second block