help-gnu-radius
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-gnu-radius] Help to differenciate type of service in a authent


From: Sergey Poznyakoff
Subject: Re: [Help-gnu-radius] Help to differenciate type of service in a authentication request
Date: Wed, 05 Dec 2007 18:28:54 +0200

=?ISO-8859-1?Q?Lu=EDs?= Conrado Andrade <address@hidden> ha escrit:

>       I've configured gnu-radius to use mysql authentication and used the
> NAS-ip-address distinguish between broadband and dialup. This is a
> problem to me since I have to create a list of all NASes that each
> resource have.

It is not necessary, there are at least two ways to avoid it:

1. Both raddb/naslist and raddb/clients files allow to specify hosts
using CIDR notation, e.g.:

10.10.0.0/24                    nas-1   as5600  community=public
10.10.10.1/255.255.255.224      nas-2   true

2. Both files allow to use DEFAULT keyword, which will match any NAS not
otherwise specified in the file.

>       1- Is there a authentication parameter that indicates from wich proxy
> IP the request arrived?

The Realm-Name attribute is added to each request *sent* to a remote
proxy. Proxy replies carry the Proxy-Replied=1 A/V pair. Proxy requests,
however, are not marked with any special attribute.
 
>       2- From historic reasons, DialUP radius request arrives at port 1812
> and broadband at port 1645, is ther an attibute to identify the port
> where the request arrived?

No, there's no such attribute either.  However, both are easy to
implement.

Regards,
Sergey




reply via email to

[Prev in Thread] Current Thread [Next in Thread]