Hi, I am trying to authenticate the clients from AP at one location to the radius server in different location. I also have one AP locally connected to the location where the radius resides. For this local AP, I have set the WAN IP of the NAS in the "nas" database for radius and its working fine. For the remote NAS also I am trying the similar setup but request is ignored. The message is ================ Error: Ignoring request to authentication address * port 1812 from unknown client 124.217.73.185 port 2050 ================ What is the cause of this? Thanks -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================
Hi,
Hi,
I am trying to authenticate the clients from AP at one location to the radius server in different location. I also have one AP locally connected to the location where the radius resides. For this local AP, I have set the WAN IP of the NAS in the "nas" database for radius and its working fine.
For the remote NAS also I am trying the similar setup but request is ignored.
The message is ================ Error: Ignoring request to authentication address * port 1812 from unknown client 124.217.73.185 port 2050 ================
What is the cause of this?
its fairly obvious, no? 124.217.73.185 is an unknown client. is 124.217.73.185 in your clients.conf (or NAS table if you use SQL method for clients) ? looks like it isnt. alan
its fairly obvious, no?
124.217.73.185 is an unknown client. is 124.217.73.185 in your clients.conf (or NAS table if you use SQL method for clients) ? looks like it isnt.
alan
Thanks This is what I had asked before about IP. This IP is a dynamic IP provided by the ISP. How should I configure "nas" entry in mySQL database? what should be the IP address? Should I just leave it to 0.0.0.0? For the NAS connected to the radius directly, it worked only when I used the WAN IP of the NAS in the table entry. For the request coming from the Internet, what should be the IP in nas entry? Thanks again -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================
search for dynamic-clients
its fairly obvious, no?
124.217.73.185 is an unknown client. is 124.217.73.185 in your clients.conf (or NAS table if you use SQL method for clients) ? looks like it isnt.
alan
Thanks
This is what I had asked before about IP. This IP is a dynamic IP provided by the ISP. How should I configure "nas" entry in mySQL database? what should be the IP address? Should I just leave it to 0.0.0.0?
For the NAS connected to the radius directly, it worked only when I used the WAN IP of the NAS in the table entry.
For the request coming from the Internet, what should be the IP in nas entry?
Thanks again
-- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
This is what I had asked before about IP. This IP is a dynamic IP provided by the ISP. How should I configure "nas" entry in mySQL database? what should be the IP address? Should I just leave it to 0.0.0.0?
For the NAS connected to the radius directly, it worked only when I used the WAN IP of the NAS in the table entry.
For the request coming from the Internet, what should be the IP in nas entry?
either the address as its seen by the internet (its 'WAN' address if connected directly and no NAT etc) or you can use a large wildcard to match any of the addresses it might get from your ISP - this can be found be eg checking whois for your IP range and looking at IP records. personally, I'd prefer to route the RADIUS packets via VPN so that your client is not only known, but the RADIUS stuff is a little more secured...and you'd then come in via a trusted route and not expose your RADIUS server to the world... alan
Have you that ip for a client in the nas table or in the clients.conf file?
Hi,
I am trying to authenticate the clients from AP at one location to the radius server in different location. I also have one AP locally connected to the location where the radius resides. For this local AP, I have set the WAN IP of the NAS in the "nas" database for radius and its working fine.
For the remote NAS also I am trying the similar setup but request is ignored.
The message is ================ Error: Ignoring request to authentication address * port 1812 from unknown client 124.217.73.185 port 2050 ================
What is the cause of this?
Thanks
-- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ============================== - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan Buxey -
Barbara Picci -
Deepak