Nas IP address in logs
Ivan Kalik
tnt at kalik.net
Wed Apr 23 18:44:59 CEST 2008
That will be logged in your accounting log.
Ivan Kalik
Kalik Informatika ISP
Dana 23/4/2008, "Sergio Belkin" <sebelk at gmail.com> piše:
>Thanks Ivan,
>
>I know that :) But I want get IP from NAS's that are behind a
>NAT-proxy-firewall server, I want the NAS IP and not the
>NAT-proxy-firewall server IP.
>
>In fact my clients.conf has something as follows:
>
> client 10.128.255.86 {
> require_message_authenticator = no
> secret = "pepepotamo"
> shortname = "Hormiga"
> }
> client 10.128.255.87 {
> require_message_authenticator = no
> secret = "pepepotamo2"
> shortname = "Avispa"
> }
> client 203.221.198.59 {
> require_message_authenticator = no
> secret = "pepepotamo3"
> shortname = "Abeja"
>}
>-- end of file---
>
>client with 203.221.198.59 is a remote server (connect to radius via
>vpn) with NAS's "behind".
>
>If I run in debug mode I can see the "actual" NAS IP can be read,
>
>For example:
>
>rad_recv: Access-Request packet from host 203.221.198.59 port 2048,
>id=0, length=123
> User-Name = "soyreloco"
> NAS-IP-Address = 192.168.134.210
> Called-Station-Id = "001d7edc2621"
> Calling-Station-Id = "001b63085e39"
> NAS-Identifier = "001d7edc2624"
> NAS-Port = 63
> Framed-MTU = 1400
> NAS-Port-Type = Wireless-802.11
> EAP-Message = 0x0200000a016c79616972
> Message-Authenticator = 0x951db6ffd60187bc4b6fee7f951feef3
>
>
> is there a way to get such a thing (192.168.134.210 in this case) in
>radius logs with radius running in non-debug mode?
>
>Thanks in advance!
>
>2008/4/23, Ivan Kalik <tnt at kalik.net>:
>> >From clients.conf:
>>
>> # The short name is used as an alias for the fully qualified
>> # domain name, or the IP address.
>> #
>> shortname = localhost
>>
>> shortname is printed in the log. Put NAS IP there if you want it in
>> radius.log.
>>
>> Ivan Kalik
>> Kalik Informatika ISP
>>
>>
>> Dana 23/4/2008, "Sergio Belkin" <sebelk at gmail.com> piše:
>>
>>
>> >Hi, how can I get the "NAS-IP-Address" in radius.log?
>> >
>> >--
>> >--
>> >Open Kairos http://www.openkairos.com
>> >Watch More TV http://sebelk.blogspot.com
>> >Sergio Belkin -
>>
>> >-
>> >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>> >
>> >
>>
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
>>
>
>
>--
>--
>Open Kairos http://www.openkairos.com
>Watch More TV http://sebelk.blogspot.com
>Sergio Belkin -
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>
More information about the Freeradius-Users
mailing list