13.3.9 Fall-Through

ATTRIBUTE Fall-Through 1036 integer

VALUE      Fall-Through      No                   0
VALUE      Fall-Through      Yes                  1

The Fall-Through attribute should be used in the reply list. If its value is set to Yes in a particular record, that tells Radius to continue looking up other records even when the record at hand matches the request. It can be used to provide default values for several profiles.

Consider the following example. Let’s suppose the users file contains the following:

johns   Auth-Type = SQL
                Framed-IP-Address = 11.10.10.251,
                Fall-Through = Yes

smith   Auth-Type = SQL
                Framed-IP-Address = 11.10.10.252,
                Fall-Through = Yes

DEFAULT NAS-IP-Address = 11.10.10.1
        Service-Type = Framed-User,
                Framed-Protocol = PPP

Then after successful matching of a particular user’s record, the matching will continue until it finds the DEFAULT entry, which will add its RHS to the reply pairs for this request. The effect is that, if user ‘johns’ authenticates successfully she gets the following reply pairs:

        Service-Type = Framed-User,
        Framed-Protocol = PPP,
        Framed-IP-Address = 11.10.10.251

whereas user smith gets

        Service-Type = Framed-User,
        Framed-Protocol = PPP,
        Framed-IP-Address = 11.10.10.252

Note that the attribute Fall-Through itself is never returned to the NAS.