NAS-IP vs srcIP

Michael Lecuyer mjl at iterpacis.org
Thu Apr 1 20:19:13 CEST 2010


Plenty of reasons - but one you won't have control over even in CoA is 
that it could be proxied.

The NAS-IPAddress is used in the CoA request packet to tell the NAS 
which client should receive the packet.

Marlon Duksa wrote:
> Hi everyone -
> Can anyone think of a reason why the NAS-IP and the scr-IP of the 
> access-req packet should not be the same?
> 
> If the NAS-IP is configurable in the NAS, then the NAS-IP can be set to 
> the IP address other than the src-ip of the NAS that is used in reqular 
> FreeRadius accounting/authorization packets. The source IP address of 
> the NAS is normally the native interface address from which access-req 
> was sent (but it can be configurable).
> 
> The NAS-IP would be used to address NAS in CoA requests sent from the 
> FreeRadius. We need this behavior to address certain deployment 
> requirements.
> 
> 
> 
> for example:
> 
> IP prot:
>    srcIP: 1.1.1.1   dstIP: 2.2.2.2
> Radius prot:
>    code: access-request (1)
>    AVPs:
>         NAS-IP-Address:  3.3.3.3
> 
> 
> scrIP != NAS-IP-Address
> 
> Thanks,
> Marlon 
>  
> 
> 
> ------------------------------------------------------------------------
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list