Hi all,
Can somebody tell me where the NAS-IP-Address attribute is pulled from? I've 
checked the switches.conf and all is correct in there.

I have one particular switch that has a different IP address in this attribute 
to the actual switch's IP address, and therefore radius rejects the request as 
this IP address isn't a declared client. All my other switches are working fine 
so the radius server is fine in general. I'm just not sure whether this is set 
on the radius server, or the switch. I can't find it on either.

Here's a debug log snippet:
rad_recv: Access-Request packet from host 10.1.1.10 port 1812, id=9, length=159
        NAS-IP-Address = 10.1.1.12
        NAS-Port = 50024
        Cisco-NAS-Port = "FastEthernet0/24"
        NAS-Port-Type = Ethernet
        User-Name = "st12345678"
        Called-Station-Id = "00-0D-28-1A-36-98"
        Calling-Station-Id = "F0-DE-F1-D4-FB-D7"
        Service-Type = Framed-User
        Framed-MTU = 1500
        EAP-Message = 0x0200000f0173743230303235313330
        Message-Authenticator = 0x07b499ef56d777d5284f72c3ad2cc15a

Thanks in advance.


-------------------------------------
Andi Morris
IT Security Officer
Cardiff Metropolitan University
T: 02920 205720
E: [email protected]<mailto:[email protected]>
--------------------------------------

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to