post-authentication (or authorization IP
addresses, assigning
VLANs, or recording authentication status (success/fail).
FreeRADIUS has full support for post-authentication policies.
Specific policies can be executed on Access-Accept,
Access-Challenge, or Access-Reject.
