Free radius 3.0 Listening to Specific IP Address
Hello How do we make free Radius 3.0 to listen on specific IP Address. The Output of radiusd -X radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 10.30.23.214 port = 1812 } listen { type = "acct" ipaddr = 10.30.23.214 port = 1813 } listen { type = "auth" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "acct" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "auth" ipaddr = 127.0.0.1 port = 18120 } Listening on auth address 10.30.23.214 port 1812 Listening on acct address 10.30.23.214 port 1813 Listening on auth address * port 1812 as server default Listening on acct address * port 1813 as server default Listening on auth address 127.0.0.1 port 18120 as server inner-tunnel Opening new proxy socket 'proxy address * port 0' Listening on proxy address * port 48464 Ready to process requests. Hostname:~ # netstat -lun | grep 1812 udp 0 0 127.0.0.1:18120 0.0.0.0:* udp 0 0 0.0.0.0:1812 0.0.0.0:* udp 0 0 10.30.23.214:1812 0.0.0.0:* Hostname:~ # netstat -lun | grep 1813 udp 0 0 0.0.0.0:1813 0.0.0.0:* udp 0 0 10.30.23.214:1813 0.0.0.0:* We don't want following . listen { type = "acct" ipaddr = * port = 0 listen { type = "auth" ipaddr = * port = 0 ********************************************************** Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues
then just remove those entries then. right now you are telling it to listen on 10.30.23.214 AND on all available addresses (*) alan On 4 September 2017 at 21:01, Bhagwat, Shrikant <shrbhagw@med.umich.edu> wrote:
Hello
How do we make free Radius 3.0 to listen on specific IP Address. The Output of radiusd -X
radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 10.30.23.214 port = 1812 } listen { type = "acct" ipaddr = 10.30.23.214 port = 1813 } listen { type = "auth" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "acct" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "auth" ipaddr = 127.0.0.1 port = 18120 } Listening on auth address 10.30.23.214 port 1812 Listening on acct address 10.30.23.214 port 1813 Listening on auth address * port 1812 as server default Listening on acct address * port 1813 as server default Listening on auth address 127.0.0.1 port 18120 as server inner-tunnel Opening new proxy socket 'proxy address * port 0' Listening on proxy address * port 48464 Ready to process requests.
Hostname:~ # netstat -lun | grep 1812 udp 0 0 127.0.0.1:18120 0.0.0.0:* udp 0 0 0.0.0.0:1812 0.0.0.0:* udp 0 0 10.30.23.214:1812 0.0.0.0:* Hostname:~ # netstat -lun | grep 1813 udp 0 0 0.0.0.0:1813 0.0.0.0:* udp 0 0 10.30.23.214:1813 0.0.0.0:*
We don't want following .
listen { type = "acct" ipaddr = * port = 0
listen { type = "auth" ipaddr = * port = 0
********************************************************** Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan Buxey -
Bhagwat, Shrikant