Re: (RADIATOR) Assign IP address to NAS interface

1999-07-27 Thread Hugh Irvine


Hi Richi -

>Hi,
>
>This isn't exactly a Radiator issue, but I'm hoping someone can help. Is
>it possible with standard Radius (or any vendor-proprietary RADIUS
>implementation) to assign an IP address to the NAS interface as well as
>the client interface? The client interface can be done with
>Framed-IP-Address ... what about the NAS side?  hehe .. Would the
>attribute NAS-IP-Address work? (According to RFC 2138, it "is only used in
>Access-Request packets")
>

This is a popular topic just at the moment.

As previously discussed, these are NAS-specific issues, with different
vendors implementing different features.

In all likelihood, you will have to send vendor-specific AV pairs to
accomplish what you want.

BTW - the latest patch version of Radiator 2.14 has a NasType check item
for exactly this purpose.

>From the README file:

27/7/99 A new version of AuthGeneric.pm here supports Client-Id and NasType
check items for users.

hth

Hugh


--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Assign IP address to NAS interface

1999-07-27 Thread Felix Izquierdo

Richi Plana wrote:
> 
> Hi,
> 
> This isn't exactly a Radiator issue, but I'm hoping someone can help. Is
> it possible with standard Radius (or any vendor-proprietary RADIUS
> implementation) to assign an IP address to the NAS interface as well as
> the client interface? The client interface can be done with
> Framed-IP-Address ... what about the NAS side?  hehe .. Would the
> attribute NAS-IP-Address work? (According to RFC 2138, it "is only used in
> Access-Request packets")
> 
> Hope someone can help.
> 

Not posible with standard Radius attributes. It is posible in a Cisco
NAS working with virtual-profiles by aaa, because the interface is a
virtual-access interface cloned from a virtual-template and merged with
IOS commands in a Cisco Radius VSA. One of the IOS commands in this VSA
can be "ip address..." or "ip unnumbered...".

This method has no impact on the NAS-IP-Adress, the address will be the
loopback or physical interface IP address where the radius packet is
originated.

I haven't information about this feature in other NAS. I only work with
Cisco. :(

Félix
__
DATAGRAMA SERVICIOS GLOBALES IP
C/ Acer 30   Pho: +34 93 223 00 98
08038 Barcelona ( SPAIN )Fax: +34 93 223 12 66
mailto:[EMAIL PROTECTED]   http://www.datagrama.net
__

ÿ
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Assign IP address to NAS interface

1999-07-27 Thread Richi Plana

Hi,

This isn't exactly a Radiator issue, but I'm hoping someone can help. Is
it possible with standard Radius (or any vendor-proprietary RADIUS
implementation) to assign an IP address to the NAS interface as well as
the client interface? The client interface can be done with
Framed-IP-Address ... what about the NAS side?  hehe .. Would the
attribute NAS-IP-Address work? (According to RFC 2138, it "is only used in
Access-Request packets")

Hope someone can help.


L   L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,-
LL LL Systems Administrator  / / \ \   / / \ \   / / \ \   / / \ \   / /
L Mosaic Communications, Inc. \ \ / /   \ \ / /   \ \ / /   \ \ / / 
L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' 


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.