RADIUS configuration based on source IP

Arran Cudbard-Bell a.cudbardb at freeradius.org
Wed Aug 31 08:20:23 CEST 2011


> 
> Proxies are not an issue today.  They may be an issue in the future,
> though.  It's likely that my proxy will itself by running freeradius.
> Does Client-IP-Address have the same problem with proxies?

Yes.

>  If yes, is
> there a workaround I can use on the proxy itself to populate
> NAS-IP-Address based on Packet-Src-IP-Address?

Sure, just put something like this in authorize {}

authorize {
	update request {
		NAS-IP-Address = "%{Packet-Src-IP-Address}"
	}
}

I *think* Client-IP-Address and Packet-Src-IP-Address are synonyms. 

You should probably read man unlang if you're just starting with FreeRADIUS 2.

-Arran

Arran Cudbard-Bell
a.cudbardb at freeradius.org

RADIUS - Half the complexity of Diameter





More information about the Freeradius-Users mailing list