2009/7/9 Ivan Kalik <tnt@kalik.net>
If the network only has the NAS1 device, the CLIENT1 can pass the authentication. When the network have two NAS device, which one is NAS1 and the other is NAS2, the CLIENT1 request can send to NAS1 and NAS2, then NAS1 and NAS2 all send the request to radius. I don't know whether CLIENT1 under NAS1 or NAS2 in radius. How to control a wpa_supplicant client request can only send to a hostapd NAS? The CLIENT1 MAC: 00:0F:1E:34:28:B4 The NAS1 MAC: 00:0F:1E:34:26:50 The NAS2 MAC: 00:0f:1e:00:00:83
That's one way - NAS mac address will be in Called-Station-Id. Or use NAS-IP-Address.
The RADIUS log -------------------------- rad_recv: Access-Request packet from host 192.168.1.45 port 1024, id=0, length=168 User-Name = "00:0F:1E:34:28:B4" NAS-IP-Address = 192.168.1.45 Called-Station-Id = "00-0F-1E-34-26-50:"
rad_recv: Access-Request packet from host 192.168.1.44 port 1024, id=1, length=186 User-Name = "00:0F:1E:34:28:B4" NAS-IP-Address = 192.168.1.44 Called-Station-Id = "00-0F-1E-00-00-83:"
Ivan Kalik Kalik Informatika ISP <http://www.freeradius.org/list/users.html>
Hi: Ivan Kalik Thank your suggestion! In that, The NAS1 MAC is 00:0F:1E:34:26:50, The NAS2 MAC is 00:0f:1e:00:00:83. The problem was that they all could received the request of The CLIENT1, so I couldn't known whether CLIENT1 under NAS1 or NAS2 in radius.