"Buschel, Alejandro" <[EMAIL PROTECTED]> wrote:
> I have a RADIUS client that gets NATted on the way to the RADIUS server. I
> have the server configured with the client's IP as well as the NATted
> (external) IP. I have setup the same shared secret for both machines. I see
> data coming in and dat abeing sent back to the client, yet the
> authentication request fails. Any suggestions?

  UDP is stateless, so I'd bet that your NAT box isn't forwarding the
server replies back to the NAS.  Use 'tcpdump' on either side of the
NAT box to verify this.

  The short summary is you shouldn't use NAT with RADIUS, or any other
UDP protocol.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to