[Chilli] multi tenant clarification
Nestor A. Diaz
nestor at tiendalinux.com
Sat Aug 23 12:31:34 UTC 2014
Hello People,
When it comes to multi tenant configuration, what is the most sane
approach according to your experience ?
I will like to set up things 'the easy way' for the people to connect.
We have groups 'A' and 'B'.
Group A should have access to a high quality gateway
Group B should have access to a medium/bad quality gateway
One way is to setup an access point with virtual SSID associated to a
VLAN and have a dedicated coovachilli service on each vlan (let's assume
coovachilli running on a central server) then problem solved (I think!).
But I was wondering if coovachilli support some kind of iptables mark
support, let me explain:
I would like have just one ssid and just one coovachilli and do
username/password authentication then the radius server respond with an
additional attribute (the group they belong: being it 'A' or 'B') and
according to that chilli will mark the packets comming from the client,
this way at the kernel level I can choose the default outside gateway
for a client.
Is that possible ?
Regards,
--
Nestor A Diaz
More information about the Chilli
mailing list