I have freeradius with mysql and chillispot. The freeradius works with a static ip address, but most of the Nas are behind dynamic public IP adress as they are connected with Xdsl. Does it possible to check Nas validity not with their IP adsress but with their Mac Address. I actully set up a Nas in sql with IP 0.0.0.0/0. it works, but i think it s not safe. Thanks in advance for your help.
Ludovic Toussaint <ludovic.toussaint@wanadoo.fr> wrote:
Does it possible to check Nas validity not with their IP adsress but with their Mac Address.
No. The server doesn't listen on a raw socket, so it doesn't get the MAC address. And even if it did, the MAC would be the MAC of the closest router, not the NAS.
I actully set up a Nas in sql with IP 0.0.0.0/0. it works, but i think it s not safe.
Make sure the shared secrets are long and difficult to guess. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Ludovic Toussaint