Radius Attribute --> Authenticator IP Adress

[Nathan McDavit-Van Fleet]

What are you trying to do?

For our implementation we have this in the inner-tunnel inside authorize. It
enables that LDAP query only when the NAS (in your case that is your AP if
it contacts FR directly) is of the IP address of 127.0.0.1.

        if (outer.NAS-IP-Address == 127.0.0.1) {
                # VPN
                ldap_vpn
        }

Does that help?

Regards,

Nathan Van Fleet
Telecommunications Analyst
Network Assessment and Integration
IITS Concordia University
(514) 848-2424 Extension:5434
 

> -----Original Message-----
> From: freeradius-users-
> bounces+nmcdavit=alcor.concordia.ca at lists.freeradius.org
> [mailto:freeradius-users-
> bounces+nmcdavit=alcor.concordia.ca at lists.freeradius.org] On Behalf Of
> _Stefan_H
> Sent: Wednesday, April 21, 2010 4:23 PM
> To: freeradius-users at lists.freeradius.org
> Subject: Radius Attribute --> Authenticator IP Adress
> 
> 
> Hi,
> 
> I thought that my Access-Point is able to handle VLAN-Attributes like
> my
> Switch but I was wrong.
> I don't want to tell the whole story.
> 
> Is there an attribute which returns the authenticator IP-Address?
> 
> For instance:  The Access-Point has the IP-Adress 192.168.10.254 and
> the
> default rule in the users-file looks like this:
> 
> DEFAULT      Authenticator-Adress == 192.168.10.254
>                   Auth-Type = Accept
> 
> I know thats nonsens but thats only an example to show you what I mean.
> 
> I looked at this site:  http://freeradius.org/rfc/rfc2865.html
> http://freeradius.org/rfc/rfc2865.html   but the NAS-IP is not the
> right
> thing  and i don't unterstand the explanation of
> http://freeradius.org/rfc/rfc2865.html#Login-IP-Host Login-IP-Host
> 
> Please help me and I know that my english is not the best
> --
> View this message in context: http://old.nabble.com/Radius-Attribute---
> %3E-Authenticator-IP-Adress-tp28301983p28301983.html
> Sent from the FreeRadius - User mailing list archive at Nabble.com.
> 
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html