NAS-IP-Address or NAS-Identifier in Access-Request?

Eric Geier me at egeier.com
Tue Aug 16 16:09:06 CEST 2011


Thanks, Alan.

Yes I read that in the RFC, but was wondering what vendors usually do,
what's the most typical, etc. I'm also wondering the same about the
Calling-Station-Id and Called-Station-ID. But sounds like those aren't
included very often, completely optional.

But now that I've thought of it, if there isn't a NAS-IP-Address then
authentication wouldn't work, right? Cause FR needs to lookup the shared
secret based upon the NAS-IP-Address?

- Eric

-----Original Message-----
From: freeradius-users-bounces+me=egeier.com at lists.freeradius.org
[mailto:freeradius-users-bounces+me=egeier.com at lists.freeradius.org] On
Behalf Of Alan Buxey
Sent: Tuesday, August 16, 2011 4:32 AM
To: FreeRadius users mailing list
Subject: Re: NAS-IP-Address or NAS-Identifier in Access-Request?

Hi,
> Does anyone happen to know if consumer-level Wi-Fi routers typically 
> transmit the NAS-IP-Address or NAS-Identifier (or maybe both) in the 
> Access-Request?

RFC's say

An Access-Request MUST contain either a NAS-IP-Address attribute or a
NAS-Identifier attribute (or both).

so, you will get one or the other (or from good vendors, both!)

if you dont get either than the kit isnt fit for purpose, or valid for
anything (because if they cant follow such as basic RFC requirement then
what hope have you for anything else to operte correctly on it?)

alan
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list