Question about NAS-Port attribute when using freeradiusclient
Hello All I am using freeradiusclient in combination with PPP in order to setup RADIUS authentication for PPTP users. Actually, I managed to authenticate users using RADIUS but I noticed that the NAS-Port attribute which is sent to RADIUS server is always 0. Is this normal? Is there any way to generate proper values for NAS-Port? Is this attribute set by radiusclient or is it extracted from somewhere else? (PPP, maybe?) Warm Regards Ali Majdzadeh Kohbanani
Ali Majdzadeh wrote:
Hello All I am using freeradiusclient in combination with PPP in order to setup RADIUS authentication for PPTP users. Actually, I managed to authenticate users using RADIUS but I noticed that the NAS-Port attribute which is sent to RADIUS server is always 0. Is this normal? Is there any way to generate proper values for NAS-Port? Is this attribute set by radiusclient or is it extracted from somewhere else? (PPP, maybe?)
It's set by the code in PPP that calls radiusclient. If you want it changed, go fix PPP. Alan DeKok.
Alan, Thanks a lot. Warm Regards Ali Majdzadeh Kohbanani 2010/10/8 Alan DeKok <aland@deployingradius.com>
Ali Majdzadeh wrote:
Hello All I am using freeradiusclient in combination with PPP in order to setup RADIUS authentication for PPTP users. Actually, I managed to authenticate users using RADIUS but I noticed that the NAS-Port attribute which is sent to RADIUS server is always 0. Is this normal? Is there any way to generate proper values for NAS-Port? Is this attribute set by radiusclient or is it extracted from somewhere else? (PPP, maybe?)
It's set by the code in PPP that calls radiusclient.
If you want it changed, go fix PPP.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan, Sorry for this extra post, but, what about Interim-Update attribute? Is there anyway to instruct the PPTP VPN connection to send interim accounting packets to the RADIUS server? Warm Regards Ali Majdzadeh Kohbanani 2010/10/8 Ali Majdzadeh <ali.majdzadeh@gmail.com>
Alan, Thanks a lot.
Warm Regards Ali Majdzadeh Kohbanani
2010/10/8 Alan DeKok <aland@deployingradius.com>
Ali Majdzadeh wrote:
Hello All I am using freeradiusclient in combination with PPP in order to setup RADIUS authentication for PPTP users. Actually, I managed to authenticate users using RADIUS but I noticed that the NAS-Port attribute which is sent to RADIUS server is always 0. Is this normal? Is there any way to generate proper values for NAS-Port? Is this attribute set by radiusclient or is it extracted from somewhere else? (PPP, maybe?)
It's set by the code in PPP that calls radiusclient.
If you want it changed, go fix PPP.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan, Sorry for this third post, I managed to instruct PPTP VPN server (NAS) to send Interim-Update packet by adding the following line to /etc/radiusclient/dictionary: ATTRIBUTE Acct-Interim-Interval 85 integer Of course, I had set Acct-Interim-Interval attribute to 60 for the specific test user in users file of the RADIUS server. Is this OK? Why the above definition is not added to freeradiusclient's dictionary? Warm Regards Ali Majdzadeh Kohbanani 2010/10/8 Ali Majdzadeh <ali.majdzadeh@gmail.com>
Alan, Sorry for this extra post, but, what about Interim-Update attribute? Is there anyway to instruct the PPTP VPN connection to send interim accounting packets to the RADIUS server?
Warm Regards Ali Majdzadeh Kohbanani
2010/10/8 Ali Majdzadeh <ali.majdzadeh@gmail.com>
Alan,
Thanks a lot.
Warm Regards Ali Majdzadeh Kohbanani
2010/10/8 Alan DeKok <aland@deployingradius.com>
Ali Majdzadeh wrote:
Hello All I am using freeradiusclient in combination with PPP in order to setup RADIUS authentication for PPTP users. Actually, I managed to authenticate users using RADIUS but I noticed that the NAS-Port attribute which is sent to RADIUS server is always 0. Is this normal? Is there any way to generate proper values for NAS-Port? Is this attribute set by radiusclient or is it extracted from somewhere else? (PPP, maybe?)
It's set by the code in PPP that calls radiusclient.
If you want it changed, go fix PPP.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Ali Majdzadeh