Erico Augusto wrote: > Let I explain better ... > I'm configuring WPA, so the Access Point sends Access-Request RADIUS > packets to freeradius, with the Client-IP-Address 10.10.10.1(that is the > Access Point IP Address, configured manually), to authenticate user. > freeradius receives Client-IP-Address from Access Point. No doubt about > that.
No. FreeRADIUS does NOT receive Client-IP-Address from the Access Point. There is NO doubt about that. Since I wrote the code that implements Client-IP-Address in the server, I'm sure about that. > All what I'm trying to do is send Client-IP-Address, You can't send Client-IP-Address in a RADIUS packet. It's impossible. > after DHCP server > assigns one to the client(10.10.10.30, for example), via Post-Auth, to > my application, so that it can be possible to configure the firewall, > allowing the traffic from the host with Client-IP-Address. You want to use Framed-IP-Address. See: http://freeradius.org/rfc/attributes.htmol Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html