How to control a wpa_supplicant client request can only send to a hostapd NAS?

DJ HENRY henry1412 at gmail.com
Fri Jul 10 02:58:15 CEST 2009


2009/7/9 Ivan Kalik <tnt at kalik.net>

> > If  the network only has the NAS1 device, the CLIENT1 can pass  the
> > authentication.  When  the  network have two NAS device, which one is
> NAS1
> > and the other is NAS2, the CLIENT1 request can send to NAS1 and NAS2,
> > then  NAS1 and  NAS2  all  send  the  request to radius. I don't know
> > whether CLIENT1 under NAS1 or NAS2 in radius. How to control a
> > wpa_supplicant client request can only send to a hostapd NAS?
> > The CLIENT1 MAC: 00:0F:1E:34:28:B4
> > The NAS1 MAC: 00:0F:1E:34:26:50
> > The NAS2 MAC: 00:0f:1e:00:00:83
>
> That's one way - NAS mac address will be in Called-Station-Id. Or use
> NAS-IP-Address.
>
> > The RADIUS log
> > --------------------------
> > rad_recv: Access-Request packet from host 192.168.1.45 port 1024, id=0,
> > length=168
> >         User-Name = "00:0F:1E:34:28:B4"
> >         NAS-IP-Address = 192.168.1.45
> >         Called-Station-Id = "00-0F-1E-34-26-50:"
> >
> > rad_recv: Access-Request packet from host 192.168.1.44 port 1024, id=1,
> > length=186
> >         User-Name = "00:0F:1E:34:28:B4"
> >         NAS-IP-Address = 192.168.1.44
> >         Called-Station-Id = "00-0F-1E-00-00-83:"
>
> Ivan Kalik
> Kalik Informatika ISP
>  <http://www.freeradius.org/list/users.html>

Hi:
    Ivan Kalik
Thank your suggestion! In that, The NAS1 MAC is  00:0F:1E:34:26:50, The NAS2
MAC is  00:0f:1e:00:00:83. The problem was that they all could received the
request of The CLIENT1,  so I couldn't known whether CLIENT1 under NAS1 or
NAS2 in radius.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090710/0735dc73/attachment.html>


More information about the Freeradius-Users mailing list