Incorrect NAS-IP-Address attribute

Alan DeKok aland at deployingradius.com
Tue Oct 22 17:32:10 CEST 2013


Morris, Andi wrote:
> Can somebody tell me where the NAS-IP-Address attribute is pulled from?

  The NAS puts it into a packet.

> I have one particular switch that has a different IP address in this
> attribute to the actual switch’s IP address, and therefore radius
> rejects the request as this IP address isn’t a declared client.

  Uh... that's not how RADIUS works.  The clients are defined by the
packet source IP address.  It *never* looks at NAS-IP-Address to see if
it's a known client.

> Here’s a debug log snippet:

  Which is useless.  You didn't include the error message, which would
have been useful.

  Alan DeKok.


More information about the Freeradius-Users mailing list