1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
|
#checking vlan
if binary-to-ascii (10, 16, "", substring( option agent.circuit-id, 2, 2))= "10" {
if binary-to-ascii(16, 8, ":", substring( option agent.remote-id, 2, 6)) = "<switch mac address>" {
set test = "ok";
}
else {set test = "nok";}
}
class "port21" {
match if binary-to-ascii (10, 8, "/", suffix (option agent.circuit-id, 2)) = "0/20" and if test = "ok";
}
shared-network 1 {
subnet 192.168.0.0 netmask 255.255.255.0 {
authoritative;
}
pool {
allow members of "port21";
deny members of "port20";
range 192.168.0.21;
}
} |
Partager