I have the need to send the NAS-IP-Address to the inner-tunnel, which by default only receives the FreeRADIUS-Proxied-To. Here's what is received with the Access-Request: (7) Received Access-Request Id 0 from 74.174.75.20:55809 to 10.13.0.251:1812 length 198 (7) User-Name = "tomas@acme.com" (7) NAS-IP-Address = 75.174.238.20 And here's what is sent to the inner-tunnel: (7) eap_peap: Sending tunneled request to inner-tunnel (7) eap_peap: EAP-Message = 0x0207001701746f6d6173406f6e656c6f67696e2e636f6d (7) eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1 (7) eap_peap: User-Name = "tomas@acme.com" And here's what the inner-tunnel recieves: (7) Virtual server inner-tunnel received request (7) EAP-Message = 0x0207001701746f6d6173406f6e656c6f67696e2e636f6d (7) FreeRADIUS-Proxied-To = 127.0.0.1 (7) User-Name = "tomas@acme.com" Is there a way to send the NAS-IP-Address to the inner-tunnel? Thanks, Gary
On Thu, 2018-02-22 at 16:03 -0700, Gary Gwin wrote:
(7) Received Access-Request Id 0 from 74.174.75.20:55809 to 10.13.0.251:1812 length 198 (7) User-Name = "tomas@acme.com" (7) NAS-IP-Address = 75.174.238.20 ... Is there a way to send the NAS-IP-Address to the inner-tunnel?
You don't "send it" to the inner-tunnel, the inner tunnel can get it from the outer. Try this in the inner tunnel: update request { NAS-IP-Address = &outer.NAS-IP-Address } Or just reference &outer.NAS-IP-Address where you need it. -- Matthew
Thank you Matthew, this worked perfectly! Gary On Thu, Feb 22, 2018 at 5:01 PM, Matthew Newton <mcn@freeradius.org> wrote:
On Thu, 2018-02-22 at 16:03 -0700, Gary Gwin wrote:
(7) Received Access-Request Id 0 from 74.174.75.20:55809 to 10.13.0.251:1812 length 198 (7) User-Name = "tomas@acme.com" (7) NAS-IP-Address = 75.174.238.20 ... Is there a way to send the NAS-IP-Address to the inner-tunnel?
You don't "send it" to the inner-tunnel, the inner tunnel can get it from the outer.
Try this in the inner tunnel:
update request { NAS-IP-Address = &outer.NAS-IP-Address }
Or just reference &outer.NAS-IP-Address where you need it.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
participants (2)
-
Gary Gwin -
Matthew Newton