Re: [Help-gnu-radius] Weird Behaviour

[Sergey Poznyakoff]

There are some inconstistencies in your configuration:

>   username  Auth-Type = Local,
>                    Password = "12345",
>                    NAS-IP-Address = 66.108.198.79
>           Match-Profile = IPPOOL,
>           Fall-Through = Yes

1) You have explicitely specified NAS-IP-Address 66.108.198.79, but
the IPPOOL profiles require it to be either 10.10.10.1 or
10.10.11.1. Therefore, if the authentication request comes from
IP 66.108.198.79 it gets authenticated but neither of IPPOOL profiles
takes effect. On the other hand, if the request comes from 10.10.10.1,
the profile for "username" does not work at all.

2) What is the purpose of Fall-Through in your configuration? Do you
have any DEFAULT entries?

In short, rewrite your users entry so it reads:

username  Auth-Type = Local,
                    Password = "12345",
          Match-Profile = IPPOOL

Besides, depending on your NASes you might need to add a proper
Service-Type attribute to reply pairs.


Regards,
Sergey