Radius Over a NAT
My APs are all over a NAT and the radius server is outside this nat. How i configure the clients.conf to acept the conections from the APs? -- "Não se VAI à Igreja. Se É Igreja<http://www.youtube.com/watch?v=ifnJtkAnBq4> ."
Esdras Caleb Oliveira Silva wrote:
My APs are all over a NAT and the radius server is outside this nat. How i configure the clients.conf to acept the conections from the APs?
You don't. RADIUS doesn't work well over NATs. Or... configure all of the APs with one shared secret. Alan DeKok.
My APs are all over a NAT and the radius server is outside this nat. How i configure the clients.conf to acept the conections from the APs?
It depends. If the NAT device statically maps the AP's IP address to a dedicated NATed IP address, then you can add the Aps NATed IP addresses to clients.conf. If the NAT device dynamically assigns a NATed IP address to the AP and/or shares NATed IP addresses with multiple APs, then you have a problem. Tim
The aps are over a private network(NAT) and the Radius server is on a public network(it have a true ip). I retrived the log file but it did not show me anything usefull. Any ideias of what i must do? On Tue, Nov 8, 2011 at 3:16 PM, Tim Sylvester < tim.sylvester@networkradius.com> wrote:
My APs are all over a NAT and the radius server is outside this nat. How i configure the clients.conf to acept the conections from the APs?
It depends. If the NAT device statically maps the AP's IP address to a dedicated NATed IP address, then you can add the Aps NATed IP addresses to clients.conf. If the NAT device dynamically assigns a NATed IP address to the AP and/or shares NATed IP addresses with multiple APs, then you have a problem.
Tim
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- "Não se VAI à Igreja. Se É Igreja<http://www.youtube.com/watch?v=ifnJtkAnBq4> ."
Hi,
The aps are over a private network(NAT) and the Radius server is on a public network(it have a true ip).� I retrived the log file but it did not show me anything usefull. Any ideias of what i must do?
the clients (APs) will have the address of their public gateway..or one of a pool from the public gateway - check your radiusd debug log to see the connections coming in. alan
yes i checked them and it was like you said, all from the public gatway, Hover my passfraze has one character error... that was the problems. Thx for help On Wed, Nov 9, 2011 at 5:55 PM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
The aps are over a private network(NAT) and the Radius server is on a public network(it have a true ip).� I retrived the log file but it did not show me anything usefull. Any ideias of what i must do?
the clients (APs) will have the address of their public gateway..or one of a pool from the public gateway - check your radiusd debug log to see the connections coming in.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- "Não se VAI à Igreja. Se É Igreja<http://www.youtube.com/watch?v=ifnJtkAnBq4> ."
participants (4)
-
Alan Buxey -
Alan DeKok -
Esdras Caleb Oliveira Silva -
Tim Sylvester