Nas with dynamic IP address

Alan DeKok aland at deployingradius.com
Sat Aug 12 22:49:51 CEST 2006


Ludovic Toussaint <ludovic.toussaint at wanadoo.fr> wrote:
> Does it possible to check Nas validity not with their IP adsress but
> with their Mac Address.

  No.  The server doesn't listen on a raw socket, so it doesn't get
the MAC address.  And even if it did, the MAC would be the MAC of the
closest router, not the NAS.

> I actully set up a Nas in sql with IP 0.0.0.0/0. it works, but i
> think it s not safe.

  Make sure the shared secrets are long and difficult to guess.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog



More information about the Freeradius-Users mailing list