Logging client IP address

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Tue Aug 25 10:50:43 CEST 2009


Hi,

> I'm experimenting with using freeradius 2.0.4 to authenticate  
> administrative access to network equipment.  If I deploy it then I'll  
> end up with well over a hundred clients, so I'd like to describe the  
> entire address range in a single 'client' block.

okay - just a big range will help you

> I also want to have a syslogged record of each login attempt, which I  
> can do, but I can't figure out how to log the client's IP address  
> without having to specify every client individually in freeradius's  
> config.  As it is, I just get
>
> Login OK: [username] (from client big-netblock port 0)
>
> Is there a way around this without having to maintain a huge list of  
> clients?

the single line log can be chaged to give more details...but the detail
logs give more information - like explicit NAS-IP-Address etc - so if
you want more detail, use the detail module....not the linelog.

alternatively, use SQL to hold the clients and have each one defined...
you can then use dynamic_clients so new entries can be added on the fly
without server rebooting

alan



More information about the Freeradius-Users mailing list