Ahh- got it. That's actually very helpful. I was able to validate Framed-IP-Address, Framed-IP-Netmask, and Idle-Timeout all appear to work with dd-wrt, which is nice. It looks like I'm going to have to dig through RFCs for the rest of what I'm looking for. https://wiki.strongswan.org/projects/1/wiki/EapTls https://wiki.dd-wrt.com/wiki/index.php/Glossary https://tools.ietf.org/html/rfc2865#section-5.6 On 10/19/18 4:01 PM, Matthew Newton wrote:
On 19 October 2018 22:44:59 BST, Stephen <kbaegis@gmail.com> wrote:
I have no idea what you're talking about. Might help to read up on RADIUS terminology then.
This is my own environment with no vendor support. I'm using dd-wrt with freeradius as well as strongswan with freeradius, so the "calling station" is just dd-wrt/WPA2 Enterprise, or alternatively strongswan/eap-tls with MacOS, Linux and Windows clients. Well I'm not sure how I was supposed to guess all that from your original question.
So you need to ask your NAS vendors - dd-wrt and strongswan - what reply attributes their software supports.
Or look at their docs/code yourself as they're open source.
Matthew
On 10/19/18 3:41 PM, Matthew Newton wrote:
On Fri, 2018-10-19 at 15:38 -0600, Stephen wrote:
Aside from the limited and anecdotal references found there to fields like `Framed-IP-Address`, where can I find a comprehensive accounting of the attributes and values I can leverage in my radreply table? Check with your NAS vendor what the NAS accepts.