朴泊斋

版权声明：转载时请以超链接形式标明文章原始出处和作者信息及本声明
http://damocles.blogbus.com/logs/39234070.html

1. Don't forget to configure the scope for the host

2.  /var/log/syslog will show the error log

class "SNAC_QUARANINE" {
  match if option user-class = "SYGATE_ENF";
}

subnet 192.168.0.0 netmask 255.255.255.0 {
  pool {
    allow members of "SNAC_QUARANINE";
    range 192.168.0.100 192.168.0.200;
  }
  pool {
    deny members of "SNAC_QUARANINE";
    range 192.168.0.201 192.168.0.254;
  }
}


subnet 10.0.0.0 netmask 255.0.0.0 {
  pool {
    allow members of "SNAC_QUARANINE";
    range 10.200.35.100 10.200.35.105;
  }
  pool {
    deny members of "SNAC_QUARANINE";
    range 10.200.35.106 10.200.35.120;
  }
}