Hi Alan, In the current lab setup I do get NAS MAC in a request packet in "Called-Station-Id". Well... this is not MAC field strictly speaking, of course, but the MAC is there because of the way NAS identifies itself in this case, and which obviously cannot be relied upon in all the cases. I was merely looking for more ways of validating NAS, because IP address can change, so can MAC, but unlikely both at the same time. Hope this makes sense. Making progress slowly but surely - thanks to you ! Gleb On Sun, May 31, 2020 at 12:23 PM Alan DeKok <aland@deployingradius.com> wrote:
On May 31, 2020, at 12:09 PM, Gleb Lisikh <in4bit.general@gmail.com> wrote:
I might need source MAC
That's just not available. The only way to get that is with PCAP. The standard socket APIs don't supply that.
And I'm curious why source MAC matters. If you need to see which machine sent the RADIUS packet, look at (a) source IP, or (b) NAS-Identifier.
The NAS-Identifier is supposed to identity a NAS. Source MAC tells you pretty much nothing.
Alan DeKok.