IP-Address

Bruce Richardson bruce_m_richardson at unitedbiscuits.com
Mon Mar 24 16:12:01 CET 2014


Hi,

I have been using freeradius for many years now to authenticate WiFi users
against active directory, and it all works perfectly.

I am now trying to integrate it with the identity awareness built into our
Checkpoint firewall system, this is able to take radius authentication
packets and build a list of users against IP addresses.

I understand that you can replicate the accounting data on from freeradius
but for this to work obviously the WiFi client's IP address needs to be in
the radius accounting data. At the moment it isn't because at the point
when the accounting data is sent the client has not yet sent its DHCP
request.

Am I correct that to get the IP address into the radius accounting the
freeradius server needs to be configured to send out the IP addresses
rather than different DHCP server.

If this is correct, could I create different IP pools to be used for each
site, and have the correct IP data sent out for for different sets of wifi
access points (NAS).

Many thanks for reading this, I just want know I am going in the correct
direction.


Regards,

Bruce Richardson

-- 
This e-mail and any attachments are confidential and solely for the use of
the intended recipient.  They may contain material protected by legal
professional or other privilege. If you receive it in error, please delete
it from your system, make no copies of it, do not disclose its contents to
any third party or use it for your own or any other person's benefit.
Please advise the sender of its receipt as soon as possible. Although this
email and its attachments are believed to be free of any virus or other
defect, it is the responsibility of the recipient to ensure that they are
virus free and no responsibility is accepted by the company for any loss or
damage arising from receipt or use thereof. Any opinions expressed that do
not relate to the official business of the company are those of the author,
not the United Biscuits group of companies.

United Biscuits (UK) Limited Registered in England number 2506007
Registered Office: Hayes Park, Hayes End Road, Hayes, Middlesex, UB4 8EE
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/mailman/private/freeradius-users/attachments/20140324/318d2dde/attachment.html>


More information about the Freeradius-Users mailing list