Hi all,

Can somebody tell me where the NAS-IP-Address attribute is pulled from?

I have one particular switch that has a different IP address in this attribute to the actual switch’s IP address, and therefore radius rejects the request as this IP address isn’t a declared client. All my other switches are working fine so the radius server is fine in general. I’m just not sure whether this is set on the radius server, or the switch. I can’t find it on either.

Here’s a debug log snippet:

rad_recv: Access-Request packet from host 10.1.1.10 port 1812, id=9, length=159

        NAS-IP-Address = 10.1.1.12

        NAS-Port = 50024

        Cisco-NAS-Port = "FastEthernet0/24"

        NAS-Port-Type = Ethernet

        User-Name = "st12345678"

        Called-Station-Id = "00-0D-28-1A-36-98"

        Calling-Station-Id = "F0-DE-F1-D4-FB-D7"

        Service-Type = Framed-User

        Framed-MTU = 1500

        EAP-Message = 0x0200000f0173743230303235313330

        Message-Authenticator = 0x07b499ef56d777d5284f72c3ad2cc15a

Thanks in advance.

-------------------------------------

Andi Morris

IT Security Officer
Cardiff Metropolitan University

T: 02920 205720
E: amorris@cardiffmet.ac.uk

--------------------------------------