Nas with dynamic IP address
Alan DeKok
aland at deployingradius.com
Sat Aug 12 22:49:51 CEST 2006
Ludovic Toussaint <ludovic.toussaint at wanadoo.fr> wrote:
> Does it possible to check Nas validity not with their IP adsress but
> with their Mac Address.
No. The server doesn't listen on a raw socket, so it doesn't get
the MAC address. And even if it did, the MAC would be the MAC of the
closest router, not the NAS.
> I actully set up a Nas in sql with IP 0.0.0.0/0. it works, but i
> think it s not safe.
Make sure the shared secrets are long and difficult to guess.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
More information about the Freeradius-Users
mailing list