Dynamic Clients IP Best practice?

[Arran Cudbard-Bell]

On Jun 23, 2011, at 9:24 PM, Brent Wilkinson wrote:

> I unfortunately have a large amount of hotspots that are behind dynamic ip’s. We have tried to get as many of them onto statics as possible but are having issues with that. After having read through a few dozen different threads and readmes does freeradius have something that has been put into place to address this?( I assume the answer is no or I glazed over while reading and missed the answer) .
>  
> If there is no built in feature is there a best practice for this?
>  
> Reverse DNS and / or VPN tunnels are the 2 solutions I can think of that would secure the nas check. Is there something else I am missing I can read up on and look into?
>  

You can define an IP range instead of individual client IPs, and then use the same shared secret for all the access points.

-Arran

> 

Arran Cudbard-Bell
a.cudbardb at freeradius.org

RADIUS - Half the Size and Complexity of Diameter

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110623/575ee101/attachment.html>