Radius Attribute --> Authenticator IP Adress
Hi, I thought that my Access-Point is able to handle VLAN-Attributes like my Switch but I was wrong. I don't want to tell the whole story. Is there an attribute which returns the authenticator IP-Address? For instance: The Access-Point has the IP-Adress 192.168.10.254 and the default rule in the users-file looks like this: DEFAULT Authenticator-Adress == 192.168.10.254 Auth-Type = Accept I know thats nonsens but thats only an example to show you what I mean. I looked at this site: http://freeradius.org/rfc/rfc2865.html http://freeradius.org/rfc/rfc2865.html but the NAS-IP is not the right thing and i don't unterstand the explanation of http://freeradius.org/rfc/rfc2865.html#Login-IP-Host Login-IP-Host Please help me and I know that my english is not the best -- View this message in context: http://old.nabble.com/Radius-Attribute---%3E-Authenticator-IP-Adress-tp28301... Sent from the FreeRadius - User mailing list archive at Nabble.com.
What are you trying to do? For our implementation we have this in the inner-tunnel inside authorize. It enables that LDAP query only when the NAS (in your case that is your AP if it contacts FR directly) is of the IP address of 127.0.0.1. if (outer.NAS-IP-Address == 127.0.0.1) { # VPN ldap_vpn } Does that help? Regards, Nathan Van Fleet Telecommunications Analyst Network Assessment and Integration IITS Concordia University (514) 848-2424 Extension:5434
-----Original Message----- From: freeradius-users- bounces+nmcdavit=alcor.concordia.ca@lists.freeradius.org [mailto:freeradius-users- bounces+nmcdavit=alcor.concordia.ca@lists.freeradius.org] On Behalf Of _Stefan_H Sent: Wednesday, April 21, 2010 4:23 PM To: freeradius-users@lists.freeradius.org Subject: Radius Attribute --> Authenticator IP Adress
Hi,
I thought that my Access-Point is able to handle VLAN-Attributes like my Switch but I was wrong. I don't want to tell the whole story.
Is there an attribute which returns the authenticator IP-Address?
For instance: The Access-Point has the IP-Adress 192.168.10.254 and the default rule in the users-file looks like this:
DEFAULT Authenticator-Adress == 192.168.10.254 Auth-Type = Accept
I know thats nonsens but thats only an example to show you what I mean.
I looked at this site: http://freeradius.org/rfc/rfc2865.html http://freeradius.org/rfc/rfc2865.html but the NAS-IP is not the right thing and i don't unterstand the explanation of http://freeradius.org/rfc/rfc2865.html#Login-IP-Host Login-IP-Host
Please help me and I know that my english is not the best -- View this message in context: http://old.nabble.com/Radius-Attribute--- %3E-Authenticator-IP-Adress-tp28301983p28301983.html Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I configured 2 SSIDs on my AccessPoint one for normal members and one for administrators each is on a different VLAN. Now to the problem, i have 2 DEFAULT rules in my users-file , for the administrators i use the ldap-group thing that no normal member will be put in the administrator VLAN but the access-point can't handle with that and a normal member is allowed because of the second DEFAULT rule, therefore i thought (because the SSIDS works on virtual interfaces with different IP-Addresses) the Second DEFAULT rule can only work if the user connects to the normal member SSID(virtual interface -- Authenticator Adress). so i wanted to if its possible to work with the authenticator ip-address -- View this message in context: http://old.nabble.com/Radius-Attribute---%3E-Authenticator-IP-Address-tp2830... Sent from the FreeRadius - User mailing list archive at Nabble.com.
_Stefan_H wrote:
Hi,
I thought that my Access-Point is able to handle VLAN-Attributes like my Switch but I was wrong. I don't want to tell the whole story.
Is there an attribute which returns the authenticator IP-Address?
Packet-Src-IP-Address
I looked at this site: http://freeradius.org/rfc/rfc2865.html http://freeradius.org/rfc/rfc2865.html but the NAS-IP is not the right thing and i don't unterstand the explanation of http://freeradius.org/rfc/rfc2865.html#Login-IP-Host Login-IP-Host
You're right. None of those are appropriate. Alan DeKok.
Alan DeKok-2 wrote:
_Stefan_H wrote:
Hi,
I thought that my Access-Point is able to handle VLAN-Attributes like my Switch but I was wrong. I don't want to tell the whole story.
Is there an attribute which returns the authenticator IP-Address?
Packet-Src-IP-Address
Thanks that is the attribute I am looking for -- View this message in context: http://old.nabble.com/Radius-Attribute---%3E-Authenticator-IP-Address-tp2830... Sent from the FreeRadius - User mailing list archive at Nabble.com.
participants (3)
-
_Stefan_H -
Alan DeKok -
Nathan McDavit-Van Fleet