[RADIATOR] Defining share secret per NASID instead of IP

Heikki Vatiainen hvn at open.com.au
Fri Oct 31 12:44:28 CDT 2014


On 31.10.2014 15.01, Bengi Sağlam wrote:

> In the radiator log, I can see the Accounting packet request(first
> request after reboot) with the status Accounting-On, and Radius responds
> to client.

>     //NAS-Identifier = "00-0C-42-FA-53-30"

> Seems like Radius does not respond for the requests when I fetch Secret
> with the MAC, if you could suggest any solution for this I would appreciate.

The MAC address match is done against the Called-Station-Id attribute. 
You could consider a PreClientHook to add Called-Station-Id if it is not 
present. Note that when it is present, it would need to be the MAC address.

Thanks,
Heikki

-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, 
NetWare etc.


More information about the radiator mailing list