multiple NAS behind multiple NAT with one radius server.
Hello Everybody: Recently I am working on a project, it requires a radius server(which i use freeradius for sure) that could be shared by multiple NASes which are behind multiple NAT.(one NAS to one NAT) But not really easy for me, i have the following problem. I use freeradius+mysql, for the radius.nas table,it requires nasname which must be(?) the IP address of the NAS,but NAS only have a private IP address like 192.168.***.***,i know after through the NAT,it will get a public IP address, but the IP address is dynamics,so How could I set up the nasname for radius.nas table??? I read the clients.conf file, it said the nasname could be a hostname,but it also said the radius server will only inquire the DNS server for one time,so what will happen if the router of NAT rebooted and got a different IP address?? Is there anyway could solve my problems? Right now,what i am doing is I said the nasname as 0.0.0.0 and netmask 0 (in clients.conf),two different NAS could be connect to the radius server? is this a solution? Thank you in advanced.
Hi, You may want to look at this discussion that took place on the mailing list about the same issue and possible solutions to handle the problem: http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Stati... http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Stati... Regards -- View this message in context: http://freeradius.1045715.n5.nabble.com/multiple-NAS-behind-multiple-NAT-wit... Sent from the FreeRadius - User mailing list archive at Nabble.com.
it is really helpful,thank you very much.
Date: Wed, 14 Mar 2012 03:47:31 -0700 From: dirkvanderwalt@gmail.com To: freeradius-users@lists.freeradius.org Subject: Re: multiple NAS behind multiple NAT with one radius server.
Hi,
You may want to look at this discussion that took place on the mailing list about the same issue and possible solutions to handle the problem:
http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Stati... http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Stati...
Regards
-- View this message in context: http://freeradius.1045715.n5.nabble.com/multiple-NAS-behind-multiple-NAT-wit... Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello Dirk: I read this article, it is really helpful, thank you very much. Before reading it, my solution is set a single client entry in clients.conf like this client allAP { ipaddr=0.0.0.0 netmask=0 sercet=something ... } right now ,it works fine for multiple NAS. I want to know,ignore the security issues, does all clients use the same single entry will effect the performance of the radius server? thank you very much. Joey
Date: Wed, 14 Mar 2012 03:47:31 -0700 From: dirkvanderwalt@gmail.com To: freeradius-users@lists.freeradius.org Subject: Re: multiple NAS behind multiple NAT with one radius server.
Hi,
You may want to look at this discussion that took place on the mailing list about the same issue and possible solutions to handle the problem:
http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Stati... http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Stati...
Regards
-- View this message in context: http://freeradius.1045715.n5.nabble.com/multiple-NAS-behind-multiple-NAT-wit... Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Dirk van der Walt -
ZhenJoey -
甄鹏