dynamic ip, shared secret

[glanzel at gmx.de]

Hello

i want to allow nas's behind a flatrate to talk
with my freeradius server.
these nas's has dynamis ip's.
has anybody an idea how i could deal with that.

at the moment i have a client named 0.0.0.0/0 in the clients.conf
file - but that means that every nas have the same shared secret.
better ideas ?


and could someone tell me if my suggestions about the shared secret are
right.
-> if using pap or chap shared secred is used to encrypt password when
sending.
-> if using peap or ttls shared secret is not used in the authentication
process but for the sending of encryption key for further encryption of the
connection between supplicant and radius at the end of the authentification
session 

is that right ?

greetings grischan 

 

-- 
5 GB Mailbox, 50 FreeSMS http://www.gmx.net/de/go/promail
+++ GMX - die erste Adresse für Mail, Message, More +++