[RADIATOR] Client clause

[Hugh Irvine]

Hello Markus -

We suggest just using an "unused" IP address in your Client clause.

Ie:

<Client 1.1.1.1>
	.....
</Client>


regards

Hugh


On 19 Mar 2009, at 06:08, Markus Moeller wrote:

> I'd like to use the IdenticalClient statement, but to better manage  
> IP address changes I don't want to use an IP address in the  
> <Client ..> statement itself. I tried several things like use a fake  
> MAC addresses as shown below. Radiator accepts the fake MAC, but I  
> noticed it tries to do a DNS lookup of MAC:Group2 when starting up  
> and delays the startup quite considerably if you more then one of  
> these Client clauses.
>
>
> # Use IdenticalClient statement to add new clients
> #
> <Client MAC:Group2>
>   Secret mysecret
>   TACACSPLUSKey tacacskey
>    DefaultRealm unknown
> #
> # List of Devices (can be subnets)
> #
>   IdenticalClients 10.10.10.1
>   IdenticalClients 10.20.0.0/16
> </Client>
>
>
> Does anybody have a suggestion how to best set this up ?  I think it  
> would make sense to add just another keyword like Identifier: e.g.
>
> <Client Identifier:Group2>
>   Secret mysecret
>   TACACSPLUSKey tacacskey
>    DefaultRealm unknown
> #
> # List of Devices (can be subnets)
> #
>   IdenticalClients 10.10.10.1
>   IdenticalClients 10.20.0.0/16
> </Client>
>
> Thank you
> Markus
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.