[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Help-gnu-radius] Help to differenciate type of service in a authent
From: |
Sergey Poznyakoff |
Subject: |
Re: [Help-gnu-radius] Help to differenciate type of service in a authentication request |
Date: |
Wed, 05 Dec 2007 18:28:54 +0200 |
=?ISO-8859-1?Q?Lu=EDs?= Conrado Andrade <address@hidden> ha escrit:
> I've configured gnu-radius to use mysql authentication and used the
> NAS-ip-address distinguish between broadband and dialup. This is a
> problem to me since I have to create a list of all NASes that each
> resource have.
It is not necessary, there are at least two ways to avoid it:
1. Both raddb/naslist and raddb/clients files allow to specify hosts
using CIDR notation, e.g.:
10.10.0.0/24 nas-1 as5600 community=public
10.10.10.1/255.255.255.224 nas-2 true
2. Both files allow to use DEFAULT keyword, which will match any NAS not
otherwise specified in the file.
> 1- Is there a authentication parameter that indicates from wich proxy
> IP the request arrived?
The Realm-Name attribute is added to each request *sent* to a remote
proxy. Proxy replies carry the Proxy-Replied=1 A/V pair. Proxy requests,
however, are not marked with any special attribute.
> 2- From historic reasons, DialUP radius request arrives at port 1812
> and broadband at port 1645, is ther an attibute to identify the port
> where the request arrived?
No, there's no such attribute either. However, both are easy to
implement.
Regards,
Sergey