22 Oct
2013
22 Oct
'13
11:32 a.m.
Morris, Andi wrote:
Can somebody tell me where the NAS-IP-Address attribute is pulled from?
The NAS puts it into a packet.
I have one particular switch that has a different IP address in this attribute to the actual switch’s IP address, and therefore radius rejects the request as this IP address isn’t a declared client.
Uh... that's not how RADIUS works. The clients are defined by the packet source IP address. It *never* looks at NAS-IP-Address to see if it's a known client.
Here’s a debug log snippet:
Which is useless. You didn't include the error message, which would have been useful. Alan DeKok.