Weird shared secret issues

[A.L.M.Buxey at lboro.ac.uk]

Hi,

> 	Tech calls in and say that he can't get an appliance working in the field.
> I ask him what secret he's using and the IP address of the appliance. I want to
> be able to be locally logged onto the radius server and use radtest/radclient/rad????
> to be able to query radius asking "If I was IP, and I gave you SECRET, would you
> authorize me?". 
> 
> 	So I want to be on 1.2.3.4, but say I'm on 3.4.5.6 . Right now, If I
> say I'm on 3.4.5.6, it still wants the secret for 1.2.3.4 .

you want to spoof the source address? tricky.  one 'easy' way to do this would
be to create a local VPN/GRE tunnel on the linux box under which you could
emulate a remote link.

configure freeradius to also listen on that virtual address, run the
radclient with the destination being the end point of the VPN - the
linux routing tables would then come into play.  you'd have to
reconfigure the VPN end addresses etc each time to emulate an
outside world link...but it would work.

alan