Virtual server Depending on a radius server
Dear List, I'm reading the documentation about virtual server ( http://freeradius.org/features/virtual_servers.html) and the methods to configure them (server and client ip address, home server pool and TLS tunnel), but I don't undestand what method can be useful in this case: - My clients have dymanic Ip address. - My server only have one public IP address. - I can't do TLS tunnels with my client's NAS. I can distinguish my clients by: - NAS ID - NAS MAC address - Radius secret. I think the best way, would be to use the NAS secret to determine the virtual server. It is possible? What do you advice? Regards -- *C. Andrés Gómez R.*
Any suggestion? Regards El 19/01/2016 07:25 p.m., "Andrés Gómez" <andres.gomez.ruiz@gmail.com> escribió:
Dear List,
I'm reading the documentation about virtual server ( http://freeradius.org/features/virtual_servers.html) and the methods to configure them (server and client ip address, home server pool and TLS tunnel), but I don't undestand what method can be useful in this case:
- My clients have dymanic Ip address. - My server only have one public IP address. - I can't do TLS tunnels with my client's NAS.
I can distinguish my clients by: - NAS ID - NAS MAC address - Radius secret.
I think the best way, would be to use the NAS secret to determine the virtual server. It is possible?
What do you advice?
Regards -- *C. Andrés Gómez R.*
On Jan 19, 2016, at 7:25 PM, Andrés Gómez <andres.gomez.ruiz@gmail.com> wrote:
- My clients have dymanic Ip address. - My server only have one public IP address. - I can't do TLS tunnels with my client's NAS.
RADIUS requires static IPs for the client. Or, TLS. Or IPSec.
I think the best way, would be to use the NAS secret to determine the virtual server. It is possible?
No. Use TLS or IPSec. Alan DeKok.
participants (2)
-
Alan DeKok -
Andrés Gómez