Logging UDP port

Herwin Weststrate herwin at quarantainenet.nl
Mon Jun 23 15:42:20 CEST 2014


On 23-06-14 15:30, Jonathan Gazeley wrote:
> We've got several RADIUS clients behind a NAT, so we can't
> distinguish them by source IP. We do not control those NAS (or the
> NAT) so we can't insert arbitrary attributes, either.
> 
> Is there a way radiusd can log the UDP port on which a packet entered
> a virtual server?

Yes, the attribute control:Packet-Src-Port

> I think this might be our only way of distinguishing these clients.

Keep in mind the source port isn't guaranteed to be stable.

-- 
Herwin Weststrate


More information about the Freeradius-Users mailing list