RADIUS configuration based on source IP
Arran Cudbard-Bell
a.cudbardb at freeradius.org
Wed Aug 31 08:20:23 CEST 2011
>
> Proxies are not an issue today. They may be an issue in the future,
> though. It's likely that my proxy will itself by running freeradius.
> Does Client-IP-Address have the same problem with proxies?
Yes.
> If yes, is
> there a workaround I can use on the proxy itself to populate
> NAS-IP-Address based on Packet-Src-IP-Address?
Sure, just put something like this in authorize {}
authorize {
update request {
NAS-IP-Address = "%{Packet-Src-IP-Address}"
}
}
I *think* Client-IP-Address and Packet-Src-IP-Address are synonyms.
You should probably read man unlang if you're just starting with FreeRADIUS 2.
-Arran
Arran Cudbard-Bell
a.cudbardb at freeradius.org
RADIUS - Half the complexity of Diameter
More information about the Freeradius-Users
mailing list