Multiple shared secret per IP?

Alan DeKok aland at deployingradius.com
Mon Feb 13 16:24:44 CET 2017


On Feb 13, 2017, at 9:47 AM, Chris Taylor (chtaylo2) <chtaylo2 at cisco.com> wrote:
> Is it possible to have multiple secret strings per IP or maybe different domains per IP?  If not, any recommendations? 

  No.

  The clients should use IPSec to get different private IPs, or they should use RADIUS over TLS.

  This is one of the things we're looking at changing in v4.  It should be possible to have shared secrets per connection, i.e. (src/dst IP/port)

  Alan DeKok.




More information about the Freeradius-Users mailing list