source ip check

Alan DeKok aland at
Fri Apr 6 19:44:29 CEST 2018

On Apr 6, 2018, at 1:34 PM, Phil Frost <phil at> wrote:
> But I'll offer an alternate direction of research in case adjusting the
> freeradius configuration turns out to be a dead end. If the sending socket
> isn't explicitly bound to an address, the kernel will consult the routing
> tables to decide on a source address. For example, on my Linux desktop
> packets destined for will use the source address

  That's the answer here.

  And... this is why FreeRADIUS can be bound to to (a) a specific IP, such as the VPN IP, or (b) to a specific ethernet interface, such as the VPN interface

  This is documented in the configuration files.

  Alan DeKok.

More information about the Freeradius-Users mailing list