<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi all,<o:p></o:p></p>
<p class="MsoNormal">Can somebody tell me where the NAS-IP-Address attribute is pulled from?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have one particular switch that has a different IP address in this attribute to the actual switch’s IP address, and therefore radius rejects the request as this IP address isn’t a declared client. All my other switches are working fine
so the radius server is fine in general. I’m just not sure whether this is set on the radius server, or the switch. I can’t find it on either.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Here’s a debug log snippet:<o:p></o:p></p>
<p class="MsoNormal">rad_recv: Access-Request packet from host 10.1.1.10 port 1812, id=9, length=159<o:p></o:p></p>
<p class="MsoNormal"> NAS-IP-Address = 10.1.1.12<o:p></o:p></p>
<p class="MsoNormal"> NAS-Port = 50024<o:p></o:p></p>
<p class="MsoNormal"> Cisco-NAS-Port = "FastEthernet0/24"<o:p></o:p></p>
<p class="MsoNormal"> NAS-Port-Type = Ethernet<o:p></o:p></p>
<p class="MsoNormal"> User-Name = "st12345678"<o:p></o:p></p>
<p class="MsoNormal"> Called-Station-Id = "00-0D-28-1A-36-98"<o:p></o:p></p>
<p class="MsoNormal"> Calling-Station-Id = "F0-DE-F1-D4-FB-D7"<o:p></o:p></p>
<p class="MsoNormal"> Service-Type = Framed-User<o:p></o:p></p>
<p class="MsoNormal"> Framed-MTU = 1500<o:p></o:p></p>
<p class="MsoNormal"> EAP-Message = 0x0200000f0173743230303235313330<o:p></o:p></p>
<p class="MsoNormal"> Message-Authenticator = 0x07b499ef56d777d5284f72c3ad2cc15a<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">-------------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Andi Morris<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">IT Security Officer<br>
Cardiff Metropolitan University<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">T: 02920 205720<br>
E: <a href="mailto:amorris@cardiffmet.ac.uk">amorris@cardiffmet.ac.uk</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">--------------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>